CVE-2020-6804

2020-02-2823:15:11

Google

osv.dev

AI Score

6.1

Confidence

High

EPSS

0.001

Percentile

33.8%

JSON

A reflected XSS vulnerability exists within the gateway, allowing an attacker to craft a specialized URL which could steal the user’s authentication token. When combined with CVE-2020-6803, an attacker could fully compromise the system.

References

github.com/mozilla-iot/gateway/pull/2446