CVE-2023-21432

CVE-2023-21432 concerns Samsung SmartThings prior to version 1.7.93, with an improper access control vulnerability that allows an attacker to invite others without the owner’s authorization. The issue stems from weaknesses in the invite/access flow. Documented impact is that unauthorized invites ...