Lucene search
Veracode Vulnerability DatabaseVERACODE:22007HistoryNov 22, 2019 - 3:16 a.m.
Directory Traversal
2019-11-2203:16:26
Veracode Vulnerability Database
sca.analysiscenter.veracode.com
6
0.002 Low
EPSS
Percentile
55.4%
ioBroker.js-controller is vulnerable to directory traversal. An attacker is able to include file contents from outside of the /adapter/ directory via the administrative web panel using a request for an adapter file containing the ../ characters in the file name. Authentication is not enabled by default and allows unauthenticated access to the administrative web panel.
| CPE | Name | Operator | Version |
|---|---|---|---|
| iobroker.js-controller | le | 1.5.14 |
Related
osv
osv
CVE-2019-10767
2019-11-21 17:15:11
Arbitrary File Write in iobroker.js-controller
2019-12-02 18:06:14
githubexploit
githubexploit
Exploit for Path Traversal in Iobroker Iobroker.Js-Controller
2020-12-01 09:18:57
cve
cve
CVE-2019-10767
2019-11-21 17:15:11
nodejs
nodejs
Arbitrary File Write
2019-11-29 17:54:05
cvelist
cvelist
CVE-2019-10767
2019-11-21 16:09:40
nvd
nvd
CVE-2019-10767
2019-11-21 17:15:11
github
github
Arbitrary File Write in iobroker.js-controller
2019-12-02 18:06:14
prion
prion
Authentication flaw
2019-11-21 17:15:00