Vulnerabilities > Mozilla > Webthings Gateway

DATE CVE VULNERABILITY TITLE RISK
2020-02-28 CVE-2020-6804 Cross-site Scripting vulnerability in Mozilla Webthings Gateway
A reflected XSS vulnerability exists within the gateway, allowing an attacker to craft a specialized URL which could steal the user's authentication token.
network
low complexity
mozilla CWE-79
6.1
6.1
2020-02-28 CVE-2020-6803 Open Redirect vulnerability in Mozilla Webthings Gateway
An open redirect is present on the gateway's login page, which could cause a user to be redirected to a malicious site after logging in.
network
low complexity
mozilla CWE-601
6.1
6.1