Description (CNA)
SmartHouse Webapp 6.5.33 contains multiple cross-site request forgery and cross-site scripting vulnerabilities that allow attackers to perform unauthorized actions. Attackers can exploit these vulnerabilities by tricking logged-in users into visiting malicious websites or injecting malicious scripts into various application parameters.
Affected (CNA)
| Vendor / product | Versions |
|---|---|
| Carlo Gavazzi AB / SmartHouse Webapp | affected 6.5.33 |
CWE
CWE-79, CWE-352
References
- https://www.exploit-db.com/exploits/47730
- http://www.smarthouse.nu
- https://www.zeroscience.mk/en/vulnerabilities/ZSL-2019-5543.php
ADP enrichment
No English description supplied.