CVE-2019-10765

CRITICAL

iobroker.admin < 3.6.12 - Path Traversal

Title source: llm
STIX 2.1

Description

iobroker.admin before 3.6.12 allows attacker to include file contents from outside the `/log/file1/` directory.

References (2)

Core 2
Core References
Exploit, Third Party Advisory x_refsource_misc
https://snyk.io/vuln/SNYK-JS-IOBROKERADMIN-534634

Scores

CVSS v3 9.8
EPSS 0.0171
EPSS Percentile 74.5%
Attack Vector NETWORK
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

Details

CWE
CWE-22
Status published
Products (2)
iobroker/iobroker.admin < 3.6.12
npm/iobroker.admin 0 - 3.6.12npm
Published Nov 20, 2019
Tracked Since Feb 18, 2026