Описание
Path Traversal in node-red-contrib-huemagic
node-red-contrib-huemagic 3.0.0 is affected by hue/assets/..%2F Directory Traversal.in the res.sendFile API, used in file hue-magic.js, to fetch an arbitrary file.
Пакеты
Наименование
node-red-contrib-huemagic
npm
Затронутые версииВерсия исправления
<= 3.0.0
Отсутствует
Связанные уязвимости
CVSS3: 7.5
nvd
около 5 лет назад
node-red-contrib-huemagic 3.0.0 is affected by hue/assets/..%2F Directory Traversal.in the res.sendFile API, used in file hue-magic.js, to fetch an arbitrary file.