PT-2024-22673 · Esphome · Esphome

Name of the Vulnerable Software and Affected Versions: ESPHome versions 2023.12.9 through 2024.2.x ESPHome version 2023.12.9 Description: The dashboard component of ESPHome contains API endpoints that are vulnerable to Cross-Site Request Forgery CSRF, allowing remote attackers to carry out attack...