What’s Vulnerable › Vulnerabilities

CVE-2020-21989

• Severity: high (CVSS 8.8 v3.1)
• Exploited in the wild: not listed in CISA KEV
• EPSS: 0.7% probability of exploitation in the next 30 days
• Public exploit or detection template: yes
• Published: 2021-04-27 · updated 2026-06-17
• Weakness: CWE-352

Description

HomeAutomation 3.3.2 is affected by Cross Site Request Forgery (CSRF). The application interface allows users to perform certain actions via HTTP requests without performing any validity checks to verify the requests. This can be exploited to perform certain actions with administrative privileges if a logged-in user visits a malicious web site.

Affected products

• Homeautomation Project Homeautomation: 3.3.2

References

• https://www.exploit-db.com/exploits/47808
• https://www.zeroscience.mk/en/vulnerabilities/ZSL-2019-5558.php
• https://www.exploit-db.com/exploits/47808
• https://www.zeroscience.mk/en/vulnerabilities/ZSL-2019-5558.php

Get alerted when CVE-2020-21989 or the next vulnerability affects your stack