Description
A reflected XSS vulnerability exists within the gateway, allowing an attacker to craft a specialized URL which could steal the user's authentication token. When combined with CVE-2020-6803, an attacker could fully compromise the system.
Affected products
| Vendor | Product | Affected | Fixed |
|---|---|---|---|
| Mozilla | WebThings Gateway | 0.3.0 – < 0.3.0*, 0.12.0 – < 0.12.0 | 0.3.0* |