Nodered Node-Red-Dashboard
3 CVEs affecting Nodered Node-Red-Dashboard. Latest disclosed: 2022-10-31. Critical: 0, High: 1.
| CVE | Severity | Score | Published | Summary |
|---|---|---|---|---|
CVE-2021-3223 | High | 7.5 | 2021-01-26 | Node-RED-Dashboard before 2.26.2 allows ui_base/js/..%2f directory traversal to read files. |
CVE-2019-10756 | Medium | 5.4 | 2019-10-08 | It is possible to inject JavaScript within node-red-dashboard versions prior to version 2.17.0 due to the ui_notification node accepting raw HTML by default. |
CVE-2022-3783 | Low | 3.5 | 2022-10-31 | A vulnerability, which was classified as problematic, has been found in node-red-dashboard. This issue affects some unknown processing of the file components/u… |