Vendor/product archive

nodered / node-red-dashboard CVEs

Beta · best-effort

3 CVEs tagged to nodered / node-red-dashboard — 0 Critical, 1 High, 1 Medium, 1 Low, 0 Unrated.

See this archive with more filters Back to nodered vendor archive

CVE-2022-3783

Published Oct 31, 2022

A vulnerability, which was classified as problematic, has been found in node-red-dashboard. This issue affects some unknown processing of the file components/ui-component/ui-compo…

CVSS 3.5 · Low

Vendor/product tagsBeta · best-effort

CVE-2021-3223

Published Jan 26, 2021

Node-RED-Dashboard before 2.26.2 allows ui_base/js/..%2f directory traversal to read files.

CVSS 7.5 · High

Vendor/product tagsBeta · best-effort

CVE-2019-10756

Published Oct 8, 2019

It is possible to inject JavaScript within node-red-dashboard versions prior to version 2.17.0 due to the ui_notification node accepting raw HTML by default.

CVSS 5.4 · Medium

Vendor/product tagsBeta · best-effort

Showing 1-3 of 3 CVEsPage 1 of 1