CVE-2020-6804 — XSS in Mozilla WebThings Gateway
A reflected XSS vulnerability exists within the gateway, allowing an attacker to craft a specialized URL which could steal the user's authentication token. When combined with CV…
Published: 2020-02-28 · CVSS: 8.8 · CVSS 3.1
A reflected XSS vulnerability exists within the gateway, allowing an attacker to craft a specialized URL which could steal the user's authentication token. When combined with CVE-2020-6803, an attacker could fully compromise the system.
Source: CVE Program · Revision 8b16575c39f1e1810c5e863010da073d2d3285e7