Skip to content
CVE PROGRAM SOURCE RECORD8.8 High

CVE-2020-6804

XSS in Mozilla WebThings Gateway

Read JSON ↗CVE.org ↗
Status
Published
Published
Updated
Assigning organization
mozilla

Description

A reflected XSS vulnerability exists within the gateway, allowing an attacker to craft a specialized URL which could steal the user's authentication token. When combined with CVE-2020-6803, an attacker could fully compromise the system.

Affected products

Version statuses are supplied by the assigning organization. Consult the original record for detailed ranges and platform conditions.

Mozilla WebThings Gateway

  • 0.3.0 to < 0.3.0*affected
  • 0.12.0 to < 0.12.0affected

References