Skip to content
OpenAdvisories

Vendor

openhab

6 known vulnerabilities.

Products

openhab-webui 4 openhab-addons 2
All Critical High Medium Low Exploited only Public exploit

2 results · Clear filters · Feed

  • Critical 9.8
    CVE-2024-42469

    CometVisu Backend for openHAB affected by RCE through path traversal

    openHAB, a provider of open-source home automation software, has add-ons including the visualization add-on CometVisu. Prior to version 4.2.1, CometVisu's file system endpoints don't require authentication and additionally the endpoint to update an existing f…

    openhab openhab-webui org.openhab.ui.bundles:org.openhab.ui.cometvisu Maven
  • Critical 10.0
    CVE-2024-42467

    CometVisu Backend for openHAB affected by SSRF/XSS

    openHAB, a provider of open-source home automation software, has add-ons including the visualization add-on CometVisu. In versions 3.4.0.M4 through 4.2.0,, the proxy endpoint of openHAB's CometVisu add-on can be accessed without authentication. This proxy-fea…

    openhab openhab-webui org.openhab.ui.bundles:org.openhab.ui.cometvisu Maven