arduino-create-agent vulnerabilities
4 known vulnerabilities in arduino-create-agent from Arduino. 4 are rated high or critical. Each entry lists the affected versions and the release that fixes it, where the vendor has published one.
Latest first
- 7.1 High severity
arduino-create-agent: Improper Limitation of a Pathname to a Restricted Directory
Arduino Create Agent is a package to help manage Arduino development. This vulnerability affects the endpoint `/v2/pkgs/tools/installed` and the way it handles plugin names supplied as user input. A user who has the ability to perform HTTP requests to the loca
- 7.8 High severity
arduino-create-agent: Insufficient Verification of Data Authenticity
Arduino Create Agent is a package to help manage Arduino development. The vulnerability affects the endpoint `/v2/pkgs/tools/installed`. A user who has the ability to perform HTTP requests to the localhost interface, or is able to bypass the CORS configuration
- 7.1 High severity
arduino-create-agent: Improper Limitation of a Pathname to a Restricted Directory
Arduino Create Agent is a package to help manage Arduino development. This vulnerability affects the endpoint `/v2/pkgs/tools/installed` and the way it handles plugin names supplied as user input. A user who has the ability to perform HTTP requests to the loca
- 7.8 High severity
arduino-create-agent: Improper Limitation of a Pathname to a Restricted Directory
Arduino Create Agent is a package to help manage Arduino development. This vulnerability affects the endpoint `/upload` which handles request with the `filename` parameter. A user who has the ability to perform HTTP requests to the localhost interface, or is a