CVSS 3.1
7.5 highCVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:NCVE-2018-21019
High (7.5) in home-assistant home-assistant. EPSS 1.7% chance of exploitation in the next 30 days. Fixed in homeassistant 0.67.0.
Home Assistant before 0.67.0 was vulnerable to an information disclosure that allowed an unauthenticated attacker to read the application's error log via components/api.py.
Severity
- EPSS
- 1.7% chance of exploitation in the next 30 days; higher than 77% of CVEs (scores of 2026-10-31)
- CWE
- CWE-200
- Published
- Modified
- Record from
- the NVD, synced
Affected
- home-assistant:home-assistant
Packages (OSV)
| Advisory | Ecosystem | Package | Affected | Fixed in |
|---|---|---|---|---|
| GHSA-mh78-8f49-vjg3 | PyPI | homeassistant | <0.67.0 | 0.67.0 |
| PYSEC-2019-221 | PyPI | homeassistant | <0.67.0 | 0.67.0 |