CVE-2020-13821

An issue was discovered in HiveMQ Broker Control Center 4.3.2. A crafted clientid parameter in an MQTT packet sent to the Broker is reflected in the client section of the management console. The attacker's JavaScript is loaded in a browser, which can lead to theft of the session and cookie of the...

CVE-2020-13821

HiveMQ Broker Control Center 4.3.2 is affected by a reflected XSS vulnerability: a crafted clientid in an MQTT packet sent to the Broker is echoed in the management console, causing attacker-owned JavaScript to load in the administrator’s browser and potentially steal the session and cookies. The...

CVE-2020-13821: Improper Neutralization of Input During Web Page Generation

An issue was discovered in HiveMQ Broker Control Center 4.3.2. A crafted clientid parameter in an MQTT packet sent to the Broker is reflected in the client section of the management console. The attacker's JavaScript is loaded in a browser, which can lead to theft of the session and cookie of the...

PT-2020-13704

Name of the Vulnerable Software and Affected Versions HiveMQ Broker Control Center version 4.3.2 Description An issue was discovered where a crafted clientid parameter in an MQTT packet sent to the Broker is reflected in the client section of the management console. This reflection can lead to th...