Описание
Mycodo is an environmental monitoring and regulation system. An exploit in versions prior to 8.12.7 allows anyone with access to endpoints to download files outside the intended directory. A patch has been applied and a release made. Users should upgrade to version 8.12.7. As a workaround, users may manually apply the changes from the fix commit.
Ссылки
- PatchThird Party Advisory
- Issue TrackingThird Party Advisory
- Release NotesThird Party Advisory
- PatchThird Party Advisory
- PatchThird Party Advisory
- Issue TrackingThird Party Advisory
- Release NotesThird Party Advisory
- PatchThird Party Advisory
Уязвимые конфигурации
Конфигурация 1Версия до 8.12.7 (исключая)
cpe:2.3:a:mycodo_project:mycodo:*:*:*:*:*:*:*:*
EPSS
Процентиль: 64%
0.00464
Низкий
8.8 High
CVSS3
6.5 Medium
CVSS3
4 Medium
CVSS2
Дефекты
CWE-22
EPSS
Процентиль: 64%
0.00464
Низкий
8.8 High
CVSS3
6.5 Medium
CVSS3
4 Medium
CVSS2
Дефекты
CWE-22