CVE-2021-25447CWE-284

Improper access control vulnerability in SmartThings prior to version 1.7.67.25 allows untrusted applications to cause local file inclusion in webview

published August 5, 2021

CVSS
—
EPSS
1%
Percentile
55.9
In the wild
Unconfirmed
What it is

Improper access control vulnerability in SmartThings prior to version 1.7.67.25 allows untrusted applications to cause local file inclusion in webview.

The record
Technical detail
CVSS
Not scored
CVSS v4.0
Not supplied
EPSS
0.00794 · 55.9th percentile
Weakness
CWE-284 · Improper Access Control
Published
2021-08-05T19:43Z
EPSS history
Timeline
  • 05 AUG 19:43Z
    Improper access control vulnerability in SmartThings prior to version 1.7.67.25 allows untrusted applications to cause local file inclusion in webview
    cvelistv5