https://vulnerability.circl.lu Contains only the most 10 recent entries. http://www.rssboard.org/rss-specification python-feedgen en Wed, 07 Oct 2026 12:16:54 +0000 https://vulnerability.circl.lu/vuln/fkie_cve-2020-13821 <p>An issue was discovered in HiveMQ Broker Control Center 4.3.2. A crafted clientid parameter in an MQTT packet (sent to the Broker) is reflected in the client section of the management console. The attacker&#39;s JavaScript is loaded in a browser, which can lead to theft of the session and cookie of the administrator&#39;s account of the Broker.</p> <p>An issue was discovered in HiveMQ Broker Control Center 4.3.2. A crafted clientid parameter in an MQTT packet (sent to the Broker) is reflected in the client section of the management console. The attacker&#39;s JavaScript is loaded in a browser, which can lead to theft of the session and cookie of the administrator&#39;s account of the Broker.</p> https://vulnerability.circl.lu/vuln/fkie_cve-2020-13821 https://vulnerability.circl.lu/vuln/ghsa-9qcc-v828-vgx7 <p>An issue was discovered in HiveMQ Broker Control Center 4.3.2. A crafted clientid parameter in an MQTT packet (sent to the Broker) is reflected in the client section of the management console. The attacker&#39;s JavaScript is loaded in a browser, which can lead to theft of the session and cookie of the administrator&#39;s account of the Broker.</p> <p>An issue was discovered in HiveMQ Broker Control Center 4.3.2. A crafted clientid parameter in an MQTT packet (sent to the Broker) is reflected in the client section of the management console. The attacker&#39;s JavaScript is loaded in a browser, which can lead to theft of the session and cookie of the administrator&#39;s account of the Broker.</p> https://vulnerability.circl.lu/vuln/ghsa-9qcc-v828-vgx7 https://vulnerability.circl.lu/vuln/gsd-2020-13821 gsd-2020-13821 https://vulnerability.circl.lu/vuln/gsd-2020-13821