Skip to content
OpenAdvisories

Product · openhab

openhab-webui

4 known vulnerabilities.

All Critical High Medium Low Exploited only Public exploit

2 results · Clear filters · Feed

  • Medium 5.3
    CVE-2024-42468

    Path traversal (CometVisu)

    openHAB, a provider of open-source home automation software, has add-ons including the visualization add-on CometVisu. CometVisuServlet in versions prior to 4.2.1 is susceptible to an unauthenticated path traversal vulnerability. Local files on the server can…

    openhab openhab-webui org.openhab.ui.bundles:org.openhab.ui.cometvisu Maven
  • Medium 6.5
    CVE-2024-42470

    CometVisu Backend for openHAB has a sensitive information disclosure vulnerability

    openHAB, a provider of open-source home automation software, has add-ons including the visualization add-on CometVisu. Several endpoints in versions prior to 4.2.1 of the CometVisu add-on of openHAB don't require authentication. This makes it possible for una…

    openhab openhab-webui org.openhab.ui.bundles:org.openhab.ui.cometvisu Maven