Vulnerabilities > Dgtl

DATE CVE VULNERABILITY TITLE RISK
2023-08-11 CVE-2021-26504 Path Traversal vulnerability in Dgtl Huemagic 3.0.0
Directory Traversal vulnerability in Foddy node-red-contrib-huemagic version 3.0.0, allows remote attackers to gain sensitive information via crafted request in res.sendFile API in hue-magic.js.
network
low complexity
dgtl CWE-22
7.5
2021-01-26 CVE-2021-25864 Path Traversal vulnerability in Dgtl Huemagic 3.0.0
node-red-contrib-huemagic 3.0.0 is affected by hue/assets/..%2F Directory Traversal.in the res.sendFile API, used in file hue-magic.js, to fetch an arbitrary file.
network
low complexity
dgtl CWE-22
7.5