Releases45
Frequency2 weeks 3 days
Last Release
Stars1.76K
Linux software for the Stream Deck with support for original Elgato Stream Deck plugins

CVE History

CVEPublishedCVSS v3CVSS v2
7.5 HIGH

OpenDeck is Linux software for your Elgato Stream Deck. Prior to 2.8.1, the service listening on port 57118 serves static files for installed plugins but does not properly sanitize path components. By including ../ sequences in the request path, an attacker can traverse outside the intended directory and read any file OpenDeck can access. This vulnerability is fixed in 2.8.1.