Vulnerabilities in iobroker.web 0.4.2