CVE-2020-21989

HomeAutomation 3.3.2 is affected by Cross Site Request Forgery (CSRF)

published April 27, 2021

CVSS
—
EPSS
1%
Percentile
54.4
In the wild
Unconfirmed
What it is

HomeAutomation 3.3.2 is affected by Cross Site Request Forgery (CSRF). The application interface allows users to perform certain actions via HTTP requests without performing any validity checks to verify the requests. This can be exploited to perform certain actions with administrative privileges if a logged-in user visits a malicious web site.

The record
Technical detail
CVSS
Not scored
CVSS v4.0
Not supplied
EPSS
0.00748 · 54.4th percentile
Published
2021-04-27T17:41Z
EPSS history
Timeline
  • 27 APR 17:41Z
    HomeAutomation 3.3.2 is affected by Cross Site Request Forgery (CSRF)
    cvelistv5