CVE-2021-26504

2023-08-1100:00:00

mitre

www.cve.org

vulnerability

directory traversal

remote attackers

sensitive information

crafted request

api

AI Score

7.8

Confidence

High

EPSS

0.004

Percentile

73.8%

JSON

Directory Traversal vulnerability in Foddy node-red-contrib-huemagic version 3.0.0, allows remote attackers to gain sensitive information via crafted request in res.sendFile API in hue-magic.js.

References

github.com/Foddy/node-red-contrib-huemagic/issues/217