Homeautomation Project Homeautomation
5 CVEs affecting Homeautomation Project Homeautomation. Latest disclosed: 2021-04-27. Critical: 1, High: 2.
| CVE | Severity | Score | Published | Summary |
|---|---|---|---|---|
CVE-2020-22001 | Critical | 9.8 | 2021-04-27 | HomeAutomation 3.3.2 suffers from an authentication bypass vulnerability when spoofing client IP address using the X-Forwarded-For header with the local (loopb… |
CVE-2020-21989 | High | 8.8 | 2021-04-27 | HomeAutomation 3.3.2 is affected by Cross Site Request Forgery (CSRF). The application interface allows users to perform certain actions via HTTP requests with… |
CVE-2020-22000 | High | 8.0 | 2021-04-27 | HomeAutomation 3.3.2 suffers from an authenticated OS command execution vulnerability using custom command v0.1 plugin. This can be exploited with a CSRF vulne… |
CVE-2020-21998 | Medium | 6.1 | 2021-04-27 | In HomeAutomation 3.3.2 input passed via the 'redirect' GET parameter in 'api.php' script is not properly verified before being used to redirect users. This ca… |
CVE-2020-21987 | Medium | 6.1 | 2021-04-27 | HomeAutomation 3.3.2 is affected by persistent Cross Site Scripting (XSS). XSS vulnerabilities occur when input passed via several parameters to several script… |