CVE-2021-25446CWE-284

Improper access control vulnerability in SmartThings prior to version 1.7.67.25 allows untrusted applications to cause arbitrary webpage loading in webview

published August 5, 2021

CVSS
—
EPSS
1%
Percentile
56.6
In the wild
Unconfirmed
What it is

Improper access control vulnerability in SmartThings prior to version 1.7.67.25 allows untrusted applications to cause arbitrary webpage loading in webview.

The record
Technical detail
CVSS
Not scored
CVSS v4.0
Not supplied
EPSS
0.00814 · 56.6th percentile
Weakness
CWE-284 · Improper Access Control
Published
2021-08-05T19:43Z
EPSS history
Timeline
  • 05 AUG 19:43Z
    Improper access control vulnerability in SmartThings prior to version 1.7.67.25 allows untrusted applications to cause arbitrary webpage loading in webview
    cvelistv5