Vulnerabilities > Homeautomation Project > High
| DATE | CVE | VULNERABILITY TITLE | RISK |
|---|---|---|---|
| 2021-04-27 | CVE-2020-22000 | OS Command Injection vulnerability in Homeautomation Project Homeautomation 3.3.2 HomeAutomation 3.3.2 suffers from an authenticated OS command execution vulnerability using custom command v0.1 plugin. | 8.0 |
| 2021-04-27 | CVE-2020-21989 | Cross-Site Request Forgery (CSRF) vulnerability in Homeautomation Project Homeautomation 3.3.2 HomeAutomation 3.3.2 is affected by Cross Site Request Forgery (CSRF). | 8.8 |