CVE-2020-21989

8.8 highEPSS 0.7%

High (8.8) in homeautomation project homeautomation. EPSS 0.7% chance of exploitation in the next 30 days.

HomeAutomation 3.3.2 is affected by Cross Site Request Forgery (CSRF). The application interface allows users to perform certain actions via HTTP requests without performing any validity checks to verify the requests. This can be exploited to perform certain actions with administrative privileges if a logged-in user visits a malicious web site.

Severity

CVSS 3.1

8.8 high

CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H

EPSS: 0.7% chance of exploitation in the next 30 days; higher than 54% of CVEs (scores of 2026-10-31)
CWE: CWE-352
Published: 2021-04-27
Modified: 2026-06-17
Record from: the NVD, synced 2026-10-19

Affected

homeautomation_project:homeautomation

References

https://www.exploit-db.com/exploits/47808
https://www.zeroscience.mk/en/vulnerabilities/ZSL-2019-5558.php
https://www.exploit-db.com/exploits/47808
https://www.zeroscience.mk/en/vulnerabilities/ZSL-2019-5558.php

Check your stack JSON