ESPHome vulnerable to remote code execution via arbitrary file write

Summary Security misconfiguration in edit configuration file API in dashboard component of ESPHome version 2023.12.9 command line installation allows authenticated remote attackers to read and write arbitrary files under the configuration directory rendering remote code execution possible. Detail...

GHSA-FFFG-CWC9-XVJ7

creationtimestamp| type| source ---|---|--- 2024-03-01 18:07:06+00:00| seen| https://t.me/ctinow/197851...

GHSA-HWJF-4667-GQWX

creationtimestamp| type| source ---|---|--- 2024-02-29 23:56:30+00:00| seen| https://t.me/ctinow/197135...

GHSA-9VX6-7XXF-X967

creationtimestamp| type| source ---|---|--- 2024-02-29 21:27:01+00:00| seen| https://t.me/ctinow/197024...

GHSA-VR64-R9QJ-H27F vulnerabilities

Vulnerabilities for packages: cass-config-builder...

GHSA-VR64-R9QJ-H27F vulnerabilities

Vulnerabilities for packages: cass-config-builder...

GHSA-6294-6RGP-FR7R vulnerabilities

Vulnerabilities for packages: jitsucom-bulker...

GHSA-6294-6RGP-FR7R vulnerabilities

Vulnerabilities for packages: jitsucom-bulker...

GHSA-6QVW-249J-H44C vulnerabilities

Vulnerabilities for packages: confluent-kafka, confluent-common-docker...

GHSA-22F2-V57C-J9CX

creationtimestamp| type| source ---|---|--- 2024-02-29 00:06:46+00:00| seen| https://t.me/ctinow/196006...

GHSA-QRP9-23P7-G5MF

creationtimestamp| type| source ---|---|--- 2024-02-27 23:07:05+00:00| seen| https://t.me/ctinow/194921...

GHSA-Q4QH-8PXW-R48Q

creationtimestamp| type| source ---|---|--- 2024-02-27 22:56:38+00:00| seen| https://t.me/ctinow/194914...

GHSA-JJHX-JHVP-74WQ

creationtimestamp| type| source ---|---|--- 2024-02-27 22:56:34+00:00| seen| https://t.me/ctinow/194911...

GHSA-WF4X-8MPJ-R42Q

creationtimestamp| type| source ---|---|--- 2024-02-27 13:46:51+00:00| seen| https://t.me/ctinow/194380...

GHSA-785G-282Q-PWVX

creationtimestamp| type| source ---|---|--- 2024-02-26 23:26:36+00:00| seen| https://t.me/ctinow/193831...

GHSA-4HWQ-4CPM-8VMX

creationtimestamp| type| source ---|---|--- 2024-02-26 21:26:25+00:00| seen| https://t.me/ctinow/193774...

GHSA-84C3-J8R2-MCM8

creationtimestamp| type| source ---|---|--- 2024-02-26 21:26:23+00:00| seen| https://t.me/ctinow/193772...

GHSA-4GMJ-3P3H-GM8H

creationtimestamp| type| source ---|---|--- 2024-02-26 21:17:22+00:00| seen| https://t.me/ctinow/193763...

GHSA-HX5Q-V6PJ-533R

creationtimestamp| type| source ---|---|--- 2024-02-26 21:17:21+00:00| seen| https://t.me/ctinow/193762...

GHSA-PWR2-4V36-6QPR vulnerabilities

Vulnerabilities for packages: kubeflow-pipelines-visualization-server, py3-orjson...