Read the docs

Vulnerabilities

Filters

Reset all
Threatist priority
Signals
Fix status
Impact type
Attack vector
Requirements
Product

Products as named in CPE, with their records.

Published
Weakness (CWE)
1 selected

2 records

Priority LOW 25

Improper access control vulnerability in SmartThings prior to version 1.7.67.25 allows untrusted applications to cause local file inclusion in webview.

CVSS 3.1MEDIUM 5.3 Network No auth No interaction EPSS 0.00794 Published 2021-08-05 Fixed in 1.7.67.25 CWE-284
Priority LOW 26

Improper access control vulnerability in SmartThings prior to version 1.7.67.25 allows untrusted applications to cause arbitrary webpage loading in webview.

CVSS 3.1MEDIUM 5.3 Network No auth No interaction EPSS 0.00814 Published 2021-08-05 Fixed in 1.7.67.25 CWE-284