Dgtl

Records2All Threatist records

Exploited (KEV)0None in CISA KEV

CVSS critical0CVSS 9.0–10.0

CVSS high2CVSS 7.0–8.9

Exploited now

Dgtl records in CISA KEV

No Dgtl vulnerabilities are listed in CISA KEV.

Components

Products in the NVD configurations · select one to filter the records

Huemagic 2 records HIGH

Records

2 records

TI-2021-08267 CVE-2021-26504 · GHSA-q3j9-2jmp-r96c

Directory Traversal vulnerability in Foddy node-red-contrib-huemagic version 3.0.0…

HIGH 72

Directory Traversal vulnerability in Foddy node-red-contrib-huemagic version 3.0.0, allows remote attackers to gain sensitive information via crafted request in res.sendFile API in hue-magic.js.

CVSS 3.1HIGH 7.5 Network No auth No interaction EPSS 0.01418 Published 2023-08-11 No fix listed CWE-22

TI-2021-07901 CVE-2021-25864 · GHSA-frpw-jrwx-hcfv

node-red-contrib-huemagic 3.0.0 is affected by hue/assets/..%2F Directory Traversal.in…

MEDIUM 45

node-red-contrib-huemagic 3.0.0 is affected by hue/assets/..%2F Directory Traversal.in the res.sendFile API, used in file hue-magic.js, to fetch an arbitrary file.

CVSS 3.1HIGH 7.5 Network No auth No interaction EPSS 0.09331 Published 2021-01-26 No fix listed CWE-22

Open these records in search →

Critical	0
High	2
Medium	0
Low	0
No CVSS	0