cbcvebase.

Openhab Web Interface vulnerabilities

1 known vulnerability affecting openhab/openhab_web_interface.

Total CVEs
1
CISA KEV
0
Public exploits
0
Exploited in wild
0
Severity breakdown
CRITICAL1

Vulnerabilities

Page 1 of 1
CVE-2024-42467P2CRITICALCVSS 10.0fixed in 4.2.12024-08-12
CVE-2024-42467 [CRITICAL] CWE-918 CVE-2024-42467: openHAB, a provider of open-source home automation software, has add-ons including the visualization openHAB, a provider of open-source home automation software, has add-ons including the visualization add-on CometVisu. In versions 3.4.0.M4 through 4.2.0,, the proxy endpoint of openHAB's CometVisu add-on can be accessed without authentication. This proxy-feature can be exploited as Server-Side Request Forgery (SSRF) to induce GET HTTP requests to
nvd