Vulnerabilities > CVE-2021-41185 - Unspecified vulnerability in Mycodo Project Mycodo

047910
CVSS 6.5 - MEDIUM
Attack vector
NETWORK
Attack complexity
LOW
Privileges required
LOW
Confidentiality impact
HIGH
Integrity impact
NONE
Availability impact
NONE
network
low complexity
mycodo-project
NVD
Published: 2021-10-26
Updated: 2024-11-21

Summary

Mycodo is an environmental monitoring and regulation system. An exploit in versions prior to 8.12.7 allows anyone with access to endpoints to download files outside the intended directory. A patch has been applied and a release made. Users should upgrade to version 8.12.7. As a workaround, users may manually apply the changes from the fix commit.

Vulnerable Configurations

Part Description Count
Application
Mycodo_Project
1

References