Johnson Controls Metasys

A vulnerability in Johnson Controls Metasys allows a low-privilege user to inject malicious code via a crafted URL, potentially leading to session hijacking and unauthorized access across multiple versions. The vulnerability is critical and has been addressed with patches, but organizations should implement additional…