Approved changes feed: RSS · Atom

cpe:2.3:a:fibar_group_s.a.:home_center_3:*:*:*:*:*:*:*:*

part: a version: * update: *

VendorFibar Group S.A. (f6f6afd1-2f21-56ef-96d6-3b8e03f9ca52)
ProductHome Center 3 (253dc8af-077e-5d50-9f1d-84d34ee449b7)
Edition*
Language*
Software edition*
Target software*
Target hardware*
Other*
NotesImported from gcve-enriched-dumps CVE data

PURL mappings

PURLSourceLast updated
No PURL mappings for this CPE yet.

Vulnerability references

IdentifiercpeApplicabilitySubmitteddb.gcve.eu detailsRationale
CVE:CVE-2020-36905 vulnerable 2026-06-08 05:25:49.804404 FIBARO System Home Center 5.021 Remote File Inclusion via Proxy API
HIGH (7.5)
FIBARO System Home Center 5.021 contains a remote file inclusion vulnerability in the undocumented proxy API that allows attackers to include arbitrary client-side scripts. Attackers can exploit the 'url' GET parameter to inject malicious JavaScript and potentially hijack user sessions or manipulate page content.
Published: 2026-01-06T15:52:20.162Z
Updated: 2026-03-05T01:26:54.847Z
Reference links
Imported from gcve-enriched-dumps CVE data

Contribute

You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.