Vulnerability library

Security checkFebruary 01, 2023

Path traversal in Node-RED-Dashboard

Understand the exposure, see the recommended fix, and check whether your own website has related weaknesses.

High severitynpm node-red-dashboard

Check your website

Find this and other vulnerabilities with a free scan.

Your scan runs on your computer. No account required.

Description

In Node-RED-Dashboard before 2.26.2 there is a path traversal vulnerability. It allows ui_base/js/..%2f directory traversal to read files.

Recommendation

Update the node-red-dashboard package to the latest compatible version. Followings are version details:

Affected version(s): < 2.26.2
Patched version(s): 2.26.2

References

Could your website be exposed too?

SmartScanner can check your website for Path traversal in Node-RED-Dashboard and gives you actionable findings to investigate.

Start a free scan

Related Issues

You might also like:

Apache and Express Path Traversal plus Nginx Restriction Bypass Tests with SmartScanner

How to Secure your NodeJs Express Javascript Application - part 2

10 Secure Coding Best Practices to Follow in Every Project

See something that needs correcting? Let us knowUpdated February 01, 2023