1 matches found
Domoticz path traversal vulnerability
Domoticz versions 2026.2 and earlier contain a security vulnerability. This vulnerability arises because the udevices JSON command handler fails to verify the session.rights permission before invoking Lua parsing scripts; additionally, the script parameter lacks path traversal protection. As a...
5.4CVSS6AI score0.00279EPSS
SaveExploits0References5
20