CVE-2021-41185 Download file outside intended directory
- Exploited in the wild
- Not known
- Fix
- None listed
What is CVE-2021-41185?
CVE-2021-41185 is a high-severity vulnerability in kizniche Mycodo, published on 26 Oct 2021.
Official description
Mycodo is an environmental monitoring and regulation system. An exploit in versions prior to 8.12.7 allows anyone with access to endpoints to download files outside the intended directory. A patch has been applied and a release made. Users should upgrade to version 8.12.7. As a workaround, users may manually apply the changes from the fix commit.
Weakness: CWE-22
Which versions are affected by CVE-2021-41185?
It affects 1 product.
Products include Mycodo Project Mycodo.
How do I fix CVE-2021-41185?
No fix has been published for CVE-2021-41185 yet. Limit exposure of the affected software until one is available.
Is CVE-2021-41185 being exploited?
There is no known exploitation of CVE-2021-41185 in the wild and no public exploit code.
Sources
Also known as GHSA-252r-94ph-m229.