CVE-2019-10765

Published November 20th, 2019

View on NVD ↗

CVSS v3

9.8

CRITICAL

CVSS v2

7.5

HIGH

Affected

1

PROJECT

Description

iobroker.admin before 3.6.12 allows attacker to include file contents from outside the `/log/file1/` directory.

ioBroker/ioBroker.admin

user interface for configuration and administration

GitHub

275