CVE-2020-21989
N/A
N/A
Summary
HomeAutomation 3.3.2 is affected by Cross Site Request Forgery (CSRF). The application interface allows users to perform certain actions via HTTP requests without performing any validity checks to verify the requests. This can be exploited to perform certain actions with administrative privileges if a logged-in user visits a malicious web site.
Affected Software
| Vendor | Product | Version Range | Status |
|---|---|---|---|
| n/a | n/a | n/a | affected |
Weaknesses
- n/a
ADP Enrichment
CVE Program Container
Additional References
- https://www.zeroscience.mk/en/vulnerabilities/ZSL-2019-5558.php
- https://www.exploit-db.com/exploits/47808
References
- https://www.zeroscience.mk/en/vulnerabilities/ZSL-2019-5558.php
- https://www.exploit-db.com/exploits/47808
Feedback
Was this page helpful?
Glad to hear it! Please tell us how we can improve.
Sorry to hear that. Please tell us how we can improve.