Vulnerabilities > Nodered > Node RED Dashboard > 2.12.1

DATE CVE VULNERABILITY TITLE RISK
2022-10-31 CVE-2022-3783 Cross-site Scripting vulnerability in Nodered Node-Red-Dashboard
A vulnerability, which was classified as problematic, has been found in node-red-dashboard.
network
low complexity
nodered CWE-79
6.1
6.1
2021-01-26 CVE-2021-3223 Path Traversal vulnerability in Nodered Node-Red-Dashboard
Node-RED-Dashboard before 2.26.2 allows ui_base/js/..%2f directory traversal to read files.
network
low complexity
nodered CWE-22
5.0
5.0
2019-10-08 CVE-2019-10756 Cross-site Scripting vulnerability in Nodered Node-Red-Dashboard
It is possible to inject JavaScript within node-red-dashboard versions prior to version 2.17.0 due to the ui_notification node accepting raw HTML by default.
network
nodered CWE-79
3.5
3.5