CVE-2020-13821

An issue was discovered in HiveMQ Broker Control Center 4.3.2

published August 26, 2020

CVSS
—
EPSS
1%
Percentile
44.1
In the wild
Unconfirmed
What it is

An issue was discovered in HiveMQ Broker Control Center 4.3.2. A crafted clientid parameter in an MQTT packet (sent to the Broker) is reflected in the client section of the management console. The attacker's JavaScript is loaded in a browser, which can lead to theft of the session and cookie of the administrator's account of the Broker.

The record
Technical detail
CVSS
Not scored
CVSS v4.0
Not supplied
EPSS
0.00532 · 44.1th percentile
Published
2020-08-26T15:23Z
EPSS history
Timeline
  • 26 AUG 15:23Z
    An issue was discovered in HiveMQ Broker Control Center 4.3.2
    cvelistv5