Johnson Controls Metasys Vulnerability Exposes Users to Persistent Malicious Payloads
cisa.gov
Johnson Controls Metasys Vulnerability Exposes Users to Persistent Malicious Payloads
A vulnerability in Johnson Controls Metasys allows a low-privilege user to inject a persistent malicious payload via a crafted URL, potentially leading to session hijacking and unauthorized access.