CVE-2021-44124

Published March 28th, 2022

View on NVD ↗

CVSS v3

7.5

HIGH

CVSS v2

MEDIUM

Affected

PROJECTS

Description

Hiby Music Hiby OS R3 Pro 1.5 and 1.6 is vulnerable to Directory Traversal. The HTTP Server does not have enough input data sanitization when shown data from SD Card, an attacker can navigate through the device's File System over HTTP.

feric/Findings

This repository is to document some findings i see during my research

GitHub

vext01/hiby-issues

Unofficial bug tracker for Hiby products.

GitHub