Unrated
In Jeedom through 4.1.19, a bug allows a remote attacker to bypass API access and retrieve users credentials.
CVE-2021-42557
First seen on SecPulse
References
- advisory github.com
- report synacktiv.com