CVE-2021-3152

Home Assistant before 2021.1.3 does not have a protection layer that can help to prevent directory-traversal attacks against custom integrations

published January 21, 2021

CVSS
—
EPSS
2%
Percentile
82.1
In the wild
Unconfirmed
What it is

Home Assistant before 2021.1.3 does not have a protection layer that can help to prevent directory-traversal attacks against custom integrations. NOTE: the vendor's perspective is that the vulnerability itself is in custom integrations written by third parties, not in Home Assistant; however, Home Assistant does have a security update that is worthwhile in addressing this situation

The record
Technical detail
CVSS
Not scored
CVSS v4.0
Not supplied
EPSS
0.02159 · 82.1th percentile
Published
2021-01-21T15:10Z
EPSS history
Timeline
  • 21 JAN 15:10Z
    Home Assistant before 2021.1.3 does not have a protection layer that can help to prevent directory-traversal attacks against custom integrations
    cvelistv5