Path traversal in Node-RED-Dashboard
High severity
GitHub Reviewed
Published
Jan 29, 2021
to the GitHub Advisory Database
•
Updated Feb 1, 2023
Description
Published by the National Vulnerability Database
Jan 26, 2021
Reviewed
Jan 27, 2021
Published to the GitHub Advisory Database
Jan 29, 2021
Last updated
Feb 1, 2023
In Node-RED-Dashboard before 2.26.2 there is a path traversal vulnerability. It allows ui_base/js/..%2f directory traversal to read files.
References