CVE-2021-25447

The CVE concerns Samsung SmartThings. Affected product: SmartThings app (versions prior to 1.7.67.25). Root cause: improper access control allowing untrusted applications to perform local file inclusion in the WebView. Impact: local file inclusion in the app context (no vector details provided be...