~ / search / GHSA-mh78-8f49-vjg3

GHSA-mh78-8f49-vjg3

Home Assistant information disclosure vulnerability

Source: GitHub Advisory Database (reviewed) High CVE-2018-21019

Packages

EcosystemPackageAffectedFixed in
PyPI homeassistant < 0.67.0 0.67.0

Details

As written in the advisory (Markdown source, shown as plain text).

Home Assistant before 0.67.0 was vulnerable to an information disclosure that allowed an unauthenticated attacker to read the application's error log via components/api.py.

References

External links from the advisory. They lead to third-party sites.