Rooting Home Assistant through MeshCore: XSS attacks with a LoRa node name

mxsasha.eu

cross-posted to:
homeassistant@lemmy.world

Rooting Home Assistant through MeshCore: XSS attacks with a LoRa node name

mxsasha.eu

RSS Bot@lemmy.bestiver.seBM to Lobste.rs@lemmy.bestiver.seEnglish · 2 months ago

cross-posted to:
homeassistant@lemmy.world

A crafted MeshCore node name could compromise any Home Assistant instance running meshcore-card as soon as someone viewed a dashboard with that card. MeshCore …

Comments

You must log in or # to comment.

Chat

Lobste.rs@lemmy.bestiver.se

lobsters@lemmy.bestiver.se

You are not logged in. However you can subscribe from another Fediverse account, for example Lemmy or Mastodon. To do this, paste the following into the search field of your instance: !lobsters@lemmy.bestiver.se

Community locked: only moderators can create posts. You can still comment on posts.

RSS Feed of lobste.rs

Source of the RSS Bot

Visibility: Public

This community can be federated to other instances and be posted/commented in by their users.

48 users / day
130 users / week
486 users / month
1.71K users / 6 months
1 local subscriber
390 subscribers
8.32K Posts
730 Comments
Modlog