Skip to content
OpenAdvisories

Vendor

arduino

11 known vulnerabilities.

Products

arduino-create-agent 5 arduino-ide 3 ArduinoCore-avr 2 arduino-app-lab 1
All Critical High Medium Low Exploited only Public exploit

2 results · Clear filters · Feed

  • High 7.3
    CVE-2023-43800

    Insufficient Verification of Data Authenticity in Arduino Create Agent

    Arduino Create Agent is a package to help manage Arduino development. The vulnerability affects the endpoint `/v2/pkgs/tools/installed`. A user who has the ability to perform HTTP requests to the localhost interface, or is able to bypass the CORS configuratio…

    arduino arduino-create-agent github.com/arduino/arduino-create-agent Go
  • High 7.1
    CVE-2023-43802

    Path traversal in Arduino Create Agent

    Arduino Create Agent is a package to help manage Arduino development. This vulnerability affects the endpoint `/upload` which handles request with the `filename` parameter. A user who has the ability to perform HTTP requests to the localhost interface, or is …

    arduino arduino-create-agent github.com/arduino/arduino-create-agent Go