Records3All Threatist records
Exploited (KEV)0None in CISA KEV
CVSS critical1CVSS 9.0–10.0
CVSS high1CVSS 7.0–8.9
Exploited now
Iobroker records in CISA KEVNo Iobroker vulnerabilities are listed in CISA KEV.
Components
Products in the NVD configurations · select one to filter the recordsPriority LOW 37
An attacker can include file contents from outside the `/adapter/xxx/` directory, where `xxx` is the name of an existent adapter like "admin".
CVSS 3.1HIGH 7.5· Network · No auth · No interaction · EPSS 0.02158 · Published 2019-11-21 · Fixed in 2.0.25 CWE-22
