Vulnerabilities in iobroker.web 1.4.2