CVEDB API

Vulnerabilities

Vulnerable Software

Vulnerability Details CVE-2019-10767

An attacker can include file contents from outside the `/adapter/xxx/` directory, where `xxx` is the name of an existent adapter like "admin". It is exploited using the administrative web panel with a request for an adapter file. **Note:** The attacker has to be logged in if the authentication is enabled (by default isn't enabled).

Exploit prediction scoring system (EPSS) score

EPSS Score 0.006

EPSS Ranking 68.4%

CVSS Severity

CVSS v3 Score 7.5

CVSS v2 Score 5.0

References

Products affected by CVE-2019-10767

Iobroker » Iobroker.js-Controller » Version: 0.11.0

cpe:2.3:a:iobroker:iobroker.js-controller:0.11.0
Iobroker » Iobroker.js-Controller » Version: 0.11.2

cpe:2.3:a:iobroker:iobroker.js-controller:0.11.2
Iobroker » Iobroker.js-Controller » Version: 0.11.3

cpe:2.3:a:iobroker:iobroker.js-controller:0.11.3
Iobroker » Iobroker.js-Controller » Version: 0.13.1

cpe:2.3:a:iobroker:iobroker.js-controller:0.13.1
Iobroker » Iobroker.js-Controller » Version: 0.13.2

cpe:2.3:a:iobroker:iobroker.js-controller:0.13.2
Iobroker » Iobroker.js-Controller » Version: 0.14.0

cpe:2.3:a:iobroker:iobroker.js-controller:0.14.0
Iobroker » Iobroker.js-Controller » Version: 0.15.1

cpe:2.3:a:iobroker:iobroker.js-controller:0.15.1
Iobroker » Iobroker.js-Controller » Version: 0.16.1

cpe:2.3:a:iobroker:iobroker.js-controller:0.16.1
Iobroker » Iobroker.js-Controller » Version: 0.17.2

cpe:2.3:a:iobroker:iobroker.js-controller:0.17.2
Iobroker » Iobroker.js-Controller » Version: 0.6.3

cpe:2.3:a:iobroker:iobroker.js-controller:0.6.3
Iobroker » Iobroker.js-Controller » Version: 0.6.4

cpe:2.3:a:iobroker:iobroker.js-controller:0.6.4
Iobroker » Iobroker.js-Controller » Version: 0.7.1

cpe:2.3:a:iobroker:iobroker.js-controller:0.7.1
Iobroker » Iobroker.js-Controller » Version: 0.7.10

cpe:2.3:a:iobroker:iobroker.js-controller:0.7.10
Iobroker » Iobroker.js-Controller » Version: 0.7.5

cpe:2.3:a:iobroker:iobroker.js-controller:0.7.5
Iobroker » Iobroker.js-Controller » Version: 0.7.7

cpe:2.3:a:iobroker:iobroker.js-controller:0.7.7
Iobroker » Iobroker.js-Controller » Version: 0.8.10

cpe:2.3:a:iobroker:iobroker.js-controller:0.8.10
Iobroker » Iobroker.js-Controller » Version: 0.9.0

cpe:2.3:a:iobroker:iobroker.js-controller:0.9.0
Iobroker » Iobroker.js-Controller » Version: 1.0.0

cpe:2.3:a:iobroker:iobroker.js-controller:1.0.0
Iobroker » Iobroker.js-Controller » Version: 1.1.3

cpe:2.3:a:iobroker:iobroker.js-controller:1.1.3
Iobroker » Iobroker.js-Controller » Version: 1.2.0

cpe:2.3:a:iobroker:iobroker.js-controller:1.2.0
Iobroker » Iobroker.js-Controller » Version: 1.2.1

cpe:2.3:a:iobroker:iobroker.js-controller:1.2.1
Iobroker » Iobroker.js-Controller » Version: 1.2.3

cpe:2.3:a:iobroker:iobroker.js-controller:1.2.3
Iobroker » Iobroker.js-Controller » Version: 1.2.5

cpe:2.3:a:iobroker:iobroker.js-controller:1.2.5
Iobroker » Iobroker.js-Controller » Version: 1.2.6

cpe:2.3:a:iobroker:iobroker.js-controller:1.2.6
Iobroker » Iobroker.js-Controller » Version: 1.3.0

cpe:2.3:a:iobroker:iobroker.js-controller:1.3.0
Iobroker » Iobroker.js-Controller » Version: 1.4.0

cpe:2.3:a:iobroker:iobroker.js-controller:1.4.0
Iobroker » Iobroker.js-Controller » Version: 1.4.1

cpe:2.3:a:iobroker:iobroker.js-controller:1.4.1
Iobroker » Iobroker.js-Controller » Version: 1.4.2

cpe:2.3:a:iobroker:iobroker.js-controller:1.4.2
Iobroker » Iobroker.js-Controller » Version: 1.5.0

cpe:2.3:a:iobroker:iobroker.js-controller:1.5.0
Iobroker » Iobroker.js-Controller » Version: 1.5.11

cpe:2.3:a:iobroker:iobroker.js-controller:1.5.11
Iobroker » Iobroker.js-Controller » Version: 1.5.12

cpe:2.3:a:iobroker:iobroker.js-controller:1.5.12
Iobroker » Iobroker.js-Controller » Version: 1.5.13

cpe:2.3:a:iobroker:iobroker.js-controller:1.5.13
Iobroker » Iobroker.js-Controller » Version: 1.5.4

cpe:2.3:a:iobroker:iobroker.js-controller:1.5.4
Iobroker » Iobroker.js-Controller » Version: 1.5.5

cpe:2.3:a:iobroker:iobroker.js-controller:1.5.5
Iobroker » Iobroker.js-Controller » Version: 1.5.6

cpe:2.3:a:iobroker:iobroker.js-controller:1.5.6
Iobroker » Iobroker.js-Controller » Version: 1.5.7

cpe:2.3:a:iobroker:iobroker.js-controller:1.5.7
Iobroker » Iobroker.js-Controller » Version: 1.5.8

cpe:2.3:a:iobroker:iobroker.js-controller:1.5.8
Iobroker » Iobroker.js-Controller » Version: 1.5.9

cpe:2.3:a:iobroker:iobroker.js-controller:1.5.9

Vulnerabilities

Vulnerable Software

Vulnerability Details CVE-2019-10767

Products

Pricing

Contact Us