Description (CNA)
Home Assistant before 0.67.0 was vulnerable to an information disclosure that allowed an unauthenticated attacker to read the application's error log via components/api.py.
Affected (CNA)
| Vendor / product | Versions |
|---|---|
| n/a / n/a | affected n/a |
CWE
No CWE identifiers supplied.
References
- https://github.com/home-assistant/home-assistant/pull/13836
- https://github.com/home-assistant/home-assistant/releases/tag/0.67.0
ADP enrichment
No English description supplied.