Security Advisory

CVE-2020-36905

CVE vulnerability detail - eXtreme Datacenter Security Operations

Published 2026-01-06 15:52:20

Last updated 2026-03-05 01:26:54

Assigner VulnCheck

CVSS score 5.1

State PUBLISHED

Description

FIBARO System Home Center 5.021 contains a remote file inclusion vulnerability in the undocumented proxy API that allows attackers to include arbitrary client-side scripts. Attackers can exploit the 'url' GET parameter to inject malicious JavaScript and potentially hijack user sessions or manipulate page content.

← Browse all CVEs View on cve.org ↗