vulnerability
Johnson Controls Metasys
Critical
Summary
A vulnerability in Johnson Controls Metasys allows a low-privilege user to inject malicious code via a crafted URL, potentially leading to session hijacking and unauthorized access across multiple versions. The vulnerability is critical and has been addressed with patches, but organizations should implement additional mitigations to reduce risk.
Summary written automatically in our own words from the original article, which belongs to its publisher and remains the reference. It may contain errors. Sources & data