CVE-2021-25864

node-red-contrib-huemagic 3.0.0 is affected by hue/assets/..%2F Directory Traversal.in the res.sendFile API, used in file hue-magic.js, to fetch an arbitrary…

published January 26, 2021

CVSS
—
EPSS
9%
Percentile
95.4
In the wild
Unconfirmed
What it is

node-red-contrib-huemagic 3.0.0 is affected by hue/assets/..%2F Directory Traversal.in the res.sendFile API, used in file hue-magic.js, to fetch an arbitrary file.

The record
Technical detail
CVSS
Not scored
CVSS v4.0
Not supplied
EPSS
0.09331 · 95.4th percentile
Published
2021-01-26T07:09Z
EPSS history
Timeline
  • 26 JAN 07:09Z
    node-red-contrib-huemagic 3.0.0 is affected by hue/assets/..%2F Directory Traversal.in the res.sendFile API, used in file hue-magic.js, to fetch an arbitrary…
    cvelistv5