CVE-2021-30126

Lightmeter ControlCenter versions 1.1.0–1.5.x before 1.5.1 expose a settings endpoint accessible via a known URL to unauthenticated users, allowing access to application settings and potentially leaking sensitive data (e.g., SMTP password, Slack access token) through a settings HTTP query. Root c...