CVE-2019-10771

—

CVSS 3.1

6.1 medium

EPSS

<1%p50

Published

Nov 25, 2019 (Nov 25, 2019)

Modified

Jun 17, 2026

Description

Characters in the GET url path are not properly escaped and can be reflected in the server response.

Vendors: iobroker
Products: iobroker.web
Weakness: CWE-79
Vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N

NVD CVE.org GitHub PoCs EPSS (0.7%)

In the news0 stories

No ingested article mentions this CVE yet.