CVE-2021-47942
HIGHHome Assistant Community Store 1.10.0 Path Traversal Account Takeover
Title source: cnaExploitation Summary
EIP tracks 1 public exploit for CVE-2021-47942. PoCs published by Lyghtnox.
AI-analyzed exploit summary This exploit leverages a path traversal vulnerability in Home Assistant Community Store (HACS) to access sensitive files (e.g., `.storage/auth`) and craft a valid JWT token for admin access. The PoC demonstrates the vulnerability by retrieving user data and generating a token that can be used to take over an account.
Description
Home Assistant Community Store (HACS) prior to 1.10.0 contains a path traversal vulnerability that allows unauthenticated attackers to read sensitive files by traversing directories via the /hacsfiles/ endpoint. Attackers can retrieve the .storage/auth file containing user credentials and refresh tokens, then craft valid JWT tokens to gain administrative access to Home Assistant instances.
Exploits (1)
This exploit leverages a path traversal vulnerability in Home Assistant Community Store (HACS) to access sensitive files (e.g., `.storage/auth`) and craft a valid JWT token for admin access. The PoC demonstrates the vulnerability by retrieving user data and generating a token that can be used to take over an account.
References (4)
Scores
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N