Carlo Gavazzi AB vulnerabilities
Published CVEs affecting Carlo Gavazzi AB products: 1 record(s), with severity, exploitation and fixes.
CVE-2019-25234
Medium · 5.3
CWE-79 Dec 24, 2025
Carlo Gavazzi SmartHouse Webapp 6.5.33 Cross-Site Request Forgery and XSS
SmartHouse Webapp 6.5.33 contains multiple cross-site request forgery and cross-site scripting vulnerabilities that allow attackers to perform unauthorized actions. Attackers can exploit these vulnerabilities by tricking logged-in users into visiting malicious websites or injecting malicious scripts into various application parameters.