Showing 1 vulnerability on this page for node-red-contrib-huemagic

Signals CISA KEV Ransomware Nuclei
npm vulnerability results
VulnerabilityTitle and contextCVSSEPSSPoCsSignalsSTIX action

Path Traversal in node-red-contrib-huemagic

node-red-contrib-huemagic 3.0.0 is affected by hue/assets/..%2F Directory Traversal.in the res.sendFile API, used in file hue-magic.js, to fetch an arbitrary file.

CWE-22Jan 26, 20211 related artifact
CVSS7.5v3.1EPSS9.33%PoCs0SignalsNot listed in CISA KEVNo known ransomware use1 Nuclei templateSTIX