Approved changes feed: RSS · Atom

cpe:2.3:a:lightmeter:controlcenter:*:*:*:*:*:*:*:*

part: a version: * update: *

VendorLightmeter (c6dafeb8-cf21-59cb-8d2e-e4c185b026ff)
ProductControlcenter (d3ff99a6-0b30-57c9-b9ac-71f69fda8377)
Edition*
Language*
Software edition*
Target software*
Target hardware*
Other*

Notes

Imported from purl2cpe mapping

PURL mappings

PURLSourceLast updated
pkg:docker/lightmeter/controlcenter purl2cpe 2026-06-01 10:13:45.112258
pkg:github/lightmeterio/controlcenter purl2cpe 2026-06-01 10:13:45.112261
pkg:gitlab/lightmeter/controlcenter purl2cpe 2026-06-01 10:13:45.112264

Vulnerability references

IdentifiercpeApplicabilitySubmitteddb.gcve.eu detailsRationale
CVE:CVE-2021-30126 vulnerable 2026-06-08 05:31:46.916945 Details available
Lightmeter ControlCenter 1.1.0 through 1.5.x before 1.5.1 allows anyone who knows the URL of a publicly available Lightmeter instance to access application settings, possibly including an SMTP password and a Slack access token, via a settings HTTP query.
Published: 2021-04-02T19:36:08.000Z
Updated: 2024-08-03T22:24:59.425Z
Reference links
Imported from gcve-enriched-dumps CVE data

Contribute

You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.

Inspect record JSON

Open JSON directly

Open this panel to browse, search, copy or download the JSON record.