WS-2020-0410

In OpenHome’s ohNet UPnP stack, versions jenkins-ohNet-Nightly-Publish-360 through ohNet1.30.3936 are vulnerable to the CallStranger vulnerability. An attacker can send a subscription request with a delivery URL on a different network segment than the fully qualified event-subscription URL, by...