CVE-2019-10767

CVE-2019-10767 affects iobroker.js-controller (Linux/Windows environments) where a path traversal flaw allows inclusion of files outside the /adapter/xxx/ directory when using the administrative web panel to request an adapter file. The root cause is inadequate access restriction outside the inte...