Security Advisory
CVE-2021-25446
CVE vulnerability detail — eXtreme Datacenter Security Operations
Description
Improper access control vulnerability in SmartThings prior to version 1.7.67.25 allows untrusted applications to cause arbitrary webpage loading in webview.