PT-2021-14398

Name of the Vulnerable Software and Affected Versions: Node-RED versions 1.2.7 and earlier Description: The issue allows arbitrary path traversal via the Projects API. If the Projects feature is enabled, a user with projects.read permission can access any file via the Projects API. The...