Search vulnerabilities

Use the Query Builder to create your own search query, or check out the documentation to learn the search syntax.

Results 2

CVE-2021-26504

Directory Traversal vulnerability in Foddy node-red-contrib-huemagic version 3.0.0, allows remote attackers to gain sensitive information via crafted request in res.sendFile API in hue-magic.js.

CVSS 3.1 · 7.5 High EPSS 1.4% KEV · Not listed
Vendors
Dgtl
Products
Huemagic
CVE-2021-25864

node-red-contrib-huemagic 3.0.0 is affected by hue/assets/..%2F Directory Traversal.in the res.sendFile API, used in file hue-magic.js, to fetch an arbitrary file.

CVSS 3.1 · 7.5 High EPSS 9.3% KEV · Not listed
Vendors
Dgtl
Products
Huemagic