CVSS 3.1
7.5 highCVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:NCVE-2021-3223
High (7.5) in nodered node-red-dashboard. EPSS 19% chance of exploitation in the next 30 days. Fixed in node-red-dashboard 2.26.2.
Node-RED-Dashboard before 2.26.2 allows ui_base/js/..%2f directory traversal to read files.
Severity
- EPSS
- 19% chance of exploitation in the next 30 days; higher than 97% of CVEs (scores of 2026-10-31)
- CWE
- CWE-22
- Published
- Modified
- Record from
- the NVD, synced
Affected
- nodered:node-red-dashboard
Packages (OSV)
| Advisory | Ecosystem | Package | Affected | Fixed in |
|---|---|---|---|---|
| GHSA-2hw7-mxvj-m455 | npm | node-red-dashboard | <2.26.2 | 2.26.2 |