Description
Node-RED-Dashboard before 2.26.2 allows ui_base/js/..%2f directory traversal to read files.
Remediation
References
https://github.com/node-red/node-red-dashboard/issues/669
https://github.com/node-red/node-red-dashboard/releases/tag/2.26.2
Related Vulnerabilities
CVE-2021-23395 Vulnerability in npm package nedb
CVE-2018-8034 Vulnerability in maven package org.apache.tomcat:tomcat-websocket
CVE-2019-10212 Vulnerability in maven package io.undertow:undertow-core
CVE-2022-21718 Vulnerability in npm package electron
CVE-2018-1295 Vulnerability in maven package org.apache.ignite:ignite-core