Information Disclosure Vulnerability in Home Assistant by Home Assistant
CVE-2018-21019

7.5HIGH

Key Information:

Vendor: Home-assistant
Status: Home-assistant
Vendor: CVE Published:; 23 September 2019

🔔 Create Home-assistant Vulnerability Alert

What is CVE-2018-21019?

An information disclosure vulnerability exists in Home Assistant versions prior to 0.67.0, which permits unauthenticated users to access sensitive application error logs through the components/api.py file. This could potentially expose sensitive details about the application's functioning and configuration, leading to other exploitation attempts.