Skip to content
OpenAdvisories

Vendor

openhab

6 known vulnerabilities.

Products

openhab-webui 4 openhab-addons 2
All Critical High Medium Low Exploited only Public exploit

3 results · Clear filters · Feed

  • Medium 5.3
    CVE-2024-42468

    Path traversal (CometVisu)

    openHAB, a provider of open-source home automation software, has add-ons including the visualization add-on CometVisu. CometVisuServlet in versions prior to 4.2.1 is susceptible to an unauthenticated path traversal vulnerability. Local files on the server can…

    openhab openhab-webui org.openhab.ui.bundles:org.openhab.ui.cometvisu Maven
  • Medium 6.5
    CVE-2024-42470

    CometVisu Backend for openHAB has a sensitive information disclosure vulnerability

    openHAB, a provider of open-source home automation software, has add-ons including the visualization add-on CometVisu. Several endpoints in versions prior to 4.2.1 of the CometVisu add-on of openHAB don't require authentication. This makes it possible for una…

    openhab openhab-webui org.openhab.ui.bundles:org.openhab.ui.cometvisu Maven
  • Medium 6.4
    CVE-2021-21266

    XXE vulnerability in OpenHAB

    openHAB is a vendor and technology agnostic open source automation software for your home. In openHAB before versions 2.5.12 and 3.0.1 the XML external entity (XXE) attack allows attackers in the same network as the openHAB instance to retrieve internal infor…

    openhab openhab-addons