Path traversal in Node-RED-Dashboard

概要

参考情報

• nvd.nist.gov/vuln/detail/CVE-2021-3223 · ADVISORY
• node-red/node-red-dashboard · WEB
• node-red/node-red-dashboard commit f48f356 · WEB
• node-red/node-red-dashboard release 2.26.2 · WEB
• npmjs.com/package/node-red-dashboard · WEB

node-red-dashboard のその他の脆弱性

• CVE-2022-3783中 6.1A vulnerability, which was classified as problematic, has been found in node-red-dashboard. This issue affects some unknown processing of th…
• CVE-2019-10756中 5.4It is possible to inject JavaScript within node-red-dashboard versions prior to version 2.17.0 due to the ui_notification node accepting raw…