CVEDB API

Vulnerabilities

Vulnerable Software

Vulnerability Details CVE-2021-47942

Home Assistant Community Store (HACS) prior to 1.10.0 contains a path traversal vulnerability that allows unauthenticated attackers to read sensitive files by traversing directories via the /hacsfiles/ endpoint. Attackers can retrieve the .storage/auth file containing user credentials and refresh tokens, then craft valid JWT tokens to gain administrative access to Home Assistant instances.

Exploit prediction scoring system (EPSS) score

EPSS Score 0.001

EPSS Ranking 29.5%

CVSS Severity

CVSS v3 Score 7.5

References

Products affected by CVE-2021-47942

Hacs » Home Assistant Community Store » Version: 0.1.0

cpe:2.3:a:hacs:home_assistant_community_store:0.1.0
Hacs » Home Assistant Community Store » Version: 0.10.0

cpe:2.3:a:hacs:home_assistant_community_store:0.10.0
Hacs » Home Assistant Community Store » Version: 0.11.0

cpe:2.3:a:hacs:home_assistant_community_store:0.11.0
Hacs » Home Assistant Community Store » Version: 0.11.1

cpe:2.3:a:hacs:home_assistant_community_store:0.11.1
Hacs » Home Assistant Community Store » Version: 0.12.0

cpe:2.3:a:hacs:home_assistant_community_store:0.12.0
Hacs » Home Assistant Community Store » Version: 0.12.1

cpe:2.3:a:hacs:home_assistant_community_store:0.12.1
Hacs » Home Assistant Community Store » Version: 0.13.0

cpe:2.3:a:hacs:home_assistant_community_store:0.13.0
Hacs » Home Assistant Community Store » Version: 0.13.1

cpe:2.3:a:hacs:home_assistant_community_store:0.13.1
Hacs » Home Assistant Community Store » Version: 0.13.2

cpe:2.3:a:hacs:home_assistant_community_store:0.13.2
Hacs » Home Assistant Community Store » Version: 0.13.3

cpe:2.3:a:hacs:home_assistant_community_store:0.13.3
Hacs » Home Assistant Community Store » Version: 0.14.0

cpe:2.3:a:hacs:home_assistant_community_store:0.14.0
Hacs » Home Assistant Community Store » Version: 0.14.1

cpe:2.3:a:hacs:home_assistant_community_store:0.14.1
Hacs » Home Assistant Community Store » Version: 0.14.2

cpe:2.3:a:hacs:home_assistant_community_store:0.14.2
Hacs » Home Assistant Community Store » Version: 0.15.0

cpe:2.3:a:hacs:home_assistant_community_store:0.15.0
Hacs » Home Assistant Community Store » Version: 0.15.1

cpe:2.3:a:hacs:home_assistant_community_store:0.15.1
Hacs » Home Assistant Community Store » Version: 0.15.10

cpe:2.3:a:hacs:home_assistant_community_store:0.15.10
Hacs » Home Assistant Community Store » Version: 0.15.11

cpe:2.3:a:hacs:home_assistant_community_store:0.15.11
Hacs » Home Assistant Community Store » Version: 0.15.2

cpe:2.3:a:hacs:home_assistant_community_store:0.15.2
Hacs » Home Assistant Community Store » Version: 0.15.3

cpe:2.3:a:hacs:home_assistant_community_store:0.15.3
Hacs » Home Assistant Community Store » Version: 0.15.4

cpe:2.3:a:hacs:home_assistant_community_store:0.15.4
Hacs » Home Assistant Community Store » Version: 0.15.5

cpe:2.3:a:hacs:home_assistant_community_store:0.15.5
Hacs » Home Assistant Community Store » Version: 0.15.6

cpe:2.3:a:hacs:home_assistant_community_store:0.15.6
Hacs » Home Assistant Community Store » Version: 0.15.7

cpe:2.3:a:hacs:home_assistant_community_store:0.15.7
Hacs » Home Assistant Community Store » Version: 0.15.8

cpe:2.3:a:hacs:home_assistant_community_store:0.15.8
Hacs » Home Assistant Community Store » Version: 0.15.9

cpe:2.3:a:hacs:home_assistant_community_store:0.15.9
Hacs » Home Assistant Community Store » Version: 0.16.0

cpe:2.3:a:hacs:home_assistant_community_store:0.16.0
Hacs » Home Assistant Community Store » Version: 0.16.1

cpe:2.3:a:hacs:home_assistant_community_store:0.16.1
Hacs » Home Assistant Community Store » Version: 0.16.2

cpe:2.3:a:hacs:home_assistant_community_store:0.16.2
Hacs » Home Assistant Community Store » Version: 0.16.3

cpe:2.3:a:hacs:home_assistant_community_store:0.16.3
Hacs » Home Assistant Community Store » Version: 0.17.0

cpe:2.3:a:hacs:home_assistant_community_store:0.17.0
Hacs » Home Assistant Community Store » Version: 0.17.1

cpe:2.3:a:hacs:home_assistant_community_store:0.17.1
Hacs » Home Assistant Community Store » Version: 0.17.2

cpe:2.3:a:hacs:home_assistant_community_store:0.17.2
Hacs » Home Assistant Community Store » Version: 0.17.3

cpe:2.3:a:hacs:home_assistant_community_store:0.17.3
Hacs » Home Assistant Community Store » Version: 0.17.4

cpe:2.3:a:hacs:home_assistant_community_store:0.17.4
Hacs » Home Assistant Community Store » Version: 0.18.0

cpe:2.3:a:hacs:home_assistant_community_store:0.18.0
Hacs » Home Assistant Community Store » Version: 0.18.1

cpe:2.3:a:hacs:home_assistant_community_store:0.18.1
Hacs » Home Assistant Community Store » Version: 0.18.2

cpe:2.3:a:hacs:home_assistant_community_store:0.18.2
Hacs » Home Assistant Community Store » Version: 0.19.0

cpe:2.3:a:hacs:home_assistant_community_store:0.19.0
Hacs » Home Assistant Community Store » Version: 0.2.0

cpe:2.3:a:hacs:home_assistant_community_store:0.2.0
Hacs » Home Assistant Community Store » Version: 0.2.1

cpe:2.3:a:hacs:home_assistant_community_store:0.2.1
Hacs » Home Assistant Community Store » Version: 0.20.0

cpe:2.3:a:hacs:home_assistant_community_store:0.20.0
Hacs » Home Assistant Community Store » Version: 0.20.1

cpe:2.3:a:hacs:home_assistant_community_store:0.20.1
Hacs » Home Assistant Community Store » Version: 0.20.2

cpe:2.3:a:hacs:home_assistant_community_store:0.20.2
Hacs » Home Assistant Community Store » Version: 0.20.3

cpe:2.3:a:hacs:home_assistant_community_store:0.20.3
Hacs » Home Assistant Community Store » Version: 0.20.4

cpe:2.3:a:hacs:home_assistant_community_store:0.20.4
Hacs » Home Assistant Community Store » Version: 0.20.5

cpe:2.3:a:hacs:home_assistant_community_store:0.20.5
Hacs » Home Assistant Community Store » Version: 0.20.6

cpe:2.3:a:hacs:home_assistant_community_store:0.20.6
Hacs » Home Assistant Community Store » Version: 0.20.7

cpe:2.3:a:hacs:home_assistant_community_store:0.20.7
Hacs » Home Assistant Community Store » Version: 0.20.8

cpe:2.3:a:hacs:home_assistant_community_store:0.20.8
Hacs » Home Assistant Community Store » Version: 0.20.9

cpe:2.3:a:hacs:home_assistant_community_store:0.20.9
Hacs » Home Assistant Community Store » Version: 0.21.0

cpe:2.3:a:hacs:home_assistant_community_store:0.21.0
Hacs » Home Assistant Community Store » Version: 0.21.1

cpe:2.3:a:hacs:home_assistant_community_store:0.21.1
Hacs » Home Assistant Community Store » Version: 0.21.2

cpe:2.3:a:hacs:home_assistant_community_store:0.21.2
Hacs » Home Assistant Community Store » Version: 0.21.3

cpe:2.3:a:hacs:home_assistant_community_store:0.21.3
Hacs » Home Assistant Community Store » Version: 0.21.4

cpe:2.3:a:hacs:home_assistant_community_store:0.21.4
Hacs » Home Assistant Community Store » Version: 0.21.5

cpe:2.3:a:hacs:home_assistant_community_store:0.21.5
Hacs » Home Assistant Community Store » Version: 0.21.6

cpe:2.3:a:hacs:home_assistant_community_store:0.21.6
Hacs » Home Assistant Community Store » Version: 0.22.0

cpe:2.3:a:hacs:home_assistant_community_store:0.22.0
Hacs » Home Assistant Community Store » Version: 0.22.1

cpe:2.3:a:hacs:home_assistant_community_store:0.22.1
Hacs » Home Assistant Community Store » Version: 0.22.2

cpe:2.3:a:hacs:home_assistant_community_store:0.22.2
Hacs » Home Assistant Community Store » Version: 0.22.3

cpe:2.3:a:hacs:home_assistant_community_store:0.22.3
Hacs » Home Assistant Community Store » Version: 0.23.0

cpe:2.3:a:hacs:home_assistant_community_store:0.23.0
Hacs » Home Assistant Community Store » Version: 0.23.1

cpe:2.3:a:hacs:home_assistant_community_store:0.23.1
Hacs » Home Assistant Community Store » Version: 0.23.2

cpe:2.3:a:hacs:home_assistant_community_store:0.23.2
Hacs » Home Assistant Community Store » Version: 0.24.0

cpe:2.3:a:hacs:home_assistant_community_store:0.24.0
Hacs » Home Assistant Community Store » Version: 0.24.1

cpe:2.3:a:hacs:home_assistant_community_store:0.24.1
Hacs » Home Assistant Community Store » Version: 0.24.2

cpe:2.3:a:hacs:home_assistant_community_store:0.24.2
Hacs » Home Assistant Community Store » Version: 0.24.3

cpe:2.3:a:hacs:home_assistant_community_store:0.24.3
Hacs » Home Assistant Community Store » Version: 0.24.4

cpe:2.3:a:hacs:home_assistant_community_store:0.24.4
Hacs » Home Assistant Community Store » Version: 0.24.5

cpe:2.3:a:hacs:home_assistant_community_store:0.24.5
Hacs » Home Assistant Community Store » Version: 0.4.0

cpe:2.3:a:hacs:home_assistant_community_store:0.4.0
Hacs » Home Assistant Community Store » Version: 0.4.1

cpe:2.3:a:hacs:home_assistant_community_store:0.4.1
Hacs » Home Assistant Community Store » Version: 0.4.2

cpe:2.3:a:hacs:home_assistant_community_store:0.4.2
Hacs » Home Assistant Community Store » Version: 0.4.3

cpe:2.3:a:hacs:home_assistant_community_store:0.4.3
Hacs » Home Assistant Community Store » Version: 0.4.4

cpe:2.3:a:hacs:home_assistant_community_store:0.4.4
Hacs » Home Assistant Community Store » Version: 0.5.0

cpe:2.3:a:hacs:home_assistant_community_store:0.5.0
Hacs » Home Assistant Community Store » Version: 0.5.1

cpe:2.3:a:hacs:home_assistant_community_store:0.5.1
Hacs » Home Assistant Community Store » Version: 0.6.0

cpe:2.3:a:hacs:home_assistant_community_store:0.6.0
Hacs » Home Assistant Community Store » Version: 0.7.0

cpe:2.3:a:hacs:home_assistant_community_store:0.7.0
Hacs » Home Assistant Community Store » Version: 0.8.0

cpe:2.3:a:hacs:home_assistant_community_store:0.8.0
Hacs » Home Assistant Community Store » Version: 0.8.1

cpe:2.3:a:hacs:home_assistant_community_store:0.8.1
Hacs » Home Assistant Community Store » Version: 0.9.0

cpe:2.3:a:hacs:home_assistant_community_store:0.9.0
Hacs » Home Assistant Community Store » Version: 1.0.0

cpe:2.3:a:hacs:home_assistant_community_store:1.0.0
Hacs » Home Assistant Community Store » Version: 1.0.1

cpe:2.3:a:hacs:home_assistant_community_store:1.0.1
Hacs » Home Assistant Community Store » Version: 1.0.2

cpe:2.3:a:hacs:home_assistant_community_store:1.0.2
Hacs » Home Assistant Community Store » Version: 1.0.3

cpe:2.3:a:hacs:home_assistant_community_store:1.0.3
Hacs » Home Assistant Community Store » Version: 1.1.0

cpe:2.3:a:hacs:home_assistant_community_store:1.1.0
Hacs » Home Assistant Community Store » Version: 1.1.1

cpe:2.3:a:hacs:home_assistant_community_store:1.1.1
Hacs » Home Assistant Community Store » Version: 1.1.2

cpe:2.3:a:hacs:home_assistant_community_store:1.1.2
Hacs » Home Assistant Community Store » Version: 1.2.0

cpe:2.3:a:hacs:home_assistant_community_store:1.2.0
Hacs » Home Assistant Community Store » Version: 1.2.1

cpe:2.3:a:hacs:home_assistant_community_store:1.2.1
Hacs » Home Assistant Community Store » Version: 1.2.2

cpe:2.3:a:hacs:home_assistant_community_store:1.2.2
Hacs » Home Assistant Community Store » Version: 1.3.0

cpe:2.3:a:hacs:home_assistant_community_store:1.3.0
Hacs » Home Assistant Community Store » Version: 1.3.1

cpe:2.3:a:hacs:home_assistant_community_store:1.3.1
Hacs » Home Assistant Community Store » Version: 1.3.2

cpe:2.3:a:hacs:home_assistant_community_store:1.3.2
Hacs » Home Assistant Community Store » Version: 1.3.3

cpe:2.3:a:hacs:home_assistant_community_store:1.3.3
Hacs » Home Assistant Community Store » Version: 1.4.0

cpe:2.3:a:hacs:home_assistant_community_store:1.4.0
Hacs » Home Assistant Community Store » Version: 1.4.1

cpe:2.3:a:hacs:home_assistant_community_store:1.4.1
Hacs » Home Assistant Community Store » Version: 1.5.0

cpe:2.3:a:hacs:home_assistant_community_store:1.5.0
Hacs » Home Assistant Community Store » Version: 1.5.1

cpe:2.3:a:hacs:home_assistant_community_store:1.5.1
Hacs » Home Assistant Community Store » Version: 1.5.2

cpe:2.3:a:hacs:home_assistant_community_store:1.5.2
Hacs » Home Assistant Community Store » Version: 1.6.0

cpe:2.3:a:hacs:home_assistant_community_store:1.6.0
Hacs » Home Assistant Community Store » Version: 1.6.1

cpe:2.3:a:hacs:home_assistant_community_store:1.6.1
Hacs » Home Assistant Community Store » Version: 1.6.2

cpe:2.3:a:hacs:home_assistant_community_store:1.6.2
Hacs » Home Assistant Community Store » Version: 1.8.0

cpe:2.3:a:hacs:home_assistant_community_store:1.8.0
Hacs » Home Assistant Community Store » Version: 1.9.0

cpe:2.3:a:hacs:home_assistant_community_store:1.9.0

Vulnerabilities

Vulnerable Software

Vulnerability Details CVE-2021-47942

Products

Pricing

Contact Us