Skip to content
Threat Feed

Tag

Hacs

1 brief RSS
high threat

CVE-2021-47942: Home Assistant Community Store (HACS) Path Traversal Vulnerability

Home Assistant Community Store (HACS) 1.10.0 is vulnerable to a path traversal, allowing unauthenticated attackers to read sensitive files by traversing directories via the /hacsfiles/ endpoint, leading to potential account takeover.

Home Assistant Community Store path-traversal account-takeover hacs cve-2021-47942
2r 1t 1c