Description (CNA)
iobroker.admin before 3.6.12 allows attacker to include file contents from outside the `/log/file1/` directory.
Affected (CNA)
| Vendor / product | Versions |
|---|---|
| n/a / iobroker.admin | affected All versions prior to version 3.6.12 |
CWE
No CWE identifiers supplied.
References
- https://snyk.io/vuln/SNYK-JS-IOBROKERADMIN-534634
- https://github.com/ioBroker/ioBroker.admin/commit/16b2b325ab47896090bc7f54b77b0a97ed74f5cd
ADP enrichment
No English description supplied.