Vulnerabilidades de FIBAR GROUP S.A.
CVEs publicadas que afetam produtos de FIBAR GROUP S.A.: 1 registro(s), com severidade, exploração e correções.
CVE-2020-36905
Alta · 7.5
CWE-829 06/01/2026
FIBARO System Home Center 5.021 Remote File Inclusion via Proxy API
FIBARO System Home Center 5.021 contains a remote file inclusion vulnerability in the undocumented proxy API that allows attackers to include arbitrary client-side scripts. Attackers can exploit the 'url' GET parameter to inject malicious JavaScript and potentially hijack user sessions or manipulate page content.