Skip to content
OpenAdvisories

Package · Go

github.com/arduino/arduino-create-agent

4 known vulnerabilities.

All Critical High Medium Low Exploited only Public exploit

4 results · Feed

  • High 7.3
    CVE-2023-43800

    Insufficient Verification of Data Authenticity in Arduino Create Agent

    Arduino Create Agent is a package to help manage Arduino development. The vulnerability affects the endpoint `/v2/pkgs/tools/installed`. A user who has the ability to perform HTTP requests to the localhost interface, or is able to bypass the CORS configuratio…

    arduino arduino-create-agent github.com/arduino/arduino-create-agent Go
  • Medium 6.1
    CVE-2023-43801

    Path traversal in Arduino Create Agent

    Arduino Create Agent is a package to help manage Arduino development. This vulnerability affects the endpoint `/v2/pkgs/tools/installed` and the way it handles plugin names supplied as user input. A user who has the ability to perform HTTP requests to the loc…

    arduino arduino-create-agent github.com/arduino/arduino-create-agent Go
  • High 7.1
    CVE-2023-43802

    Path traversal in Arduino Create Agent

    Arduino Create Agent is a package to help manage Arduino development. This vulnerability affects the endpoint `/upload` which handles request with the `filename` parameter. A user who has the ability to perform HTTP requests to the localhost interface, or is …

    arduino arduino-create-agent github.com/arduino/arduino-create-agent Go
  • Medium 6.1
    CVE-2023-43803

    Path traversal in Arduino Create Agent

    Arduino Create Agent is a package to help manage Arduino development. This vulnerability affects the endpoint `/v2/pkgs/tools/installed` and the way it handles plugin names supplied as user input. A user who has the ability to perform HTTP requests to the loc…

    arduino arduino-create-agent github.com/arduino/arduino-create-agent Go