Skip to content
CVE PROGRAM SOURCE RECORD8.8 High

CVE-2021-41185

Download file outside intended directory

Description

Mycodo is an environmental monitoring and regulation system. An exploit in versions prior to 8.12.7 allows anyone with access to endpoints to download files outside the intended directory. A patch has been applied and a release made. Users should upgrade to version 8.12.7. As a workaround, users may manually apply the changes from the fix commit.

Affected products

Version statuses are supplied by the assigning organization. Consult the original record for detailed ranges and platform conditions.

kizniche Mycodo

  • < 8.12.7affected

References