Skip to content
CVE PROGRAM SOURCE RECORD5.1 Medium

CVE-2019-25234

Carlo Gavazzi SmartHouse Webapp 6.5.33 Cross-Site Request Forgery and XSS

Description

SmartHouse Webapp 6.5.33 contains multiple cross-site request forgery and cross-site scripting vulnerabilities that allow attackers to perform unauthorized actions. Attackers can exploit these vulnerabilities by tricking logged-in users into visiting malicious websites or injecting malicious scripts into various application parameters.

Affected products

Version statuses are supplied by the assigning organization. Consult the original record for detailed ranges and platform conditions.

Carlo Gavazzi AB SmartHouse Webapp

  • 6.5.33affected

References