Description
A Cross Site Request Forgery (CSRF) vulnerability in the Green Electronics RainMachine Mini-8 (2nd Generation) and Touch HD 12 web application allows an attacker to control the RainMachine device via the REST API.
Unscored
CVE-2018-6907
EUVD-2018-18651GHSA-c5hm-c58w-5f6j
A Cross Site Request Forgery (CSRF) vulnerability in the Green Electronics RainMachine Mini-8 (2nd Generation) and Touch HD 12 web applicat…
Published Nov 1, 2018 · Updated Aug 5, 2024 · Assigned by mitre