NetSight
medium5.3

CVE-2021-25446

Improper access control vulnerability in SmartThings prior to version 1.7.67.25 allows untrusted applications to cause arbitrary webpage loading in webview.

Impact

Improper access control vulnerability in SmartThings prior to version 1.7.67.25 allows untrusted applications to cause arbitrary webpage loading in webview.

Affected products

VendorProductAffected versions
SamsungSmartthings Firmware
before 1.7.67.25

Weakness classification

References