# CVE-2024-42467: openHAB CometVisu SSRF and XSS in ProxyResource

Source: https://junglewise.ai/threats/cve-2024-42467-openhab-cometvisu-ssrf-and-xss-in-proxyresource  
Publisher: Junglewise Threat Intelligence, https://junglewise.ai/threats  
Published: 2024-08-09. Updated: 2026-08-05  
License: CC BY 4.0 with a link back

CVE-2024-42467 · Severity: critical · CVSS 10 · Published 2024-08-09

The CometVisu add-on for openHAB, a popular home automation platform, contains a security flaw in its proxy feature. An attacker can use this to access internal network services or trick administrators into executing malicious code. This could lead to unauthorized control over the smart home system or the theft of sensitive configuration data.

Technologies: [org.openhab.ui.bundles:org.openhab.ui.cometvisu (Maven)](https://junglewise.ai/threats/technologies/org-openhab-ui-bundles-org-openhab-ui-cometvisu). Vendors: [Maven](https://junglewise.ai/threats/vendors/maven).

## Quick answers

**Is CVE-2024-42467 exploited in the wild?** No. Junglewise Threat Intelligence has no report of CVE-2024-42467 being exploited in the wild.

**How severe is CVE-2024-42467?** Critical severity, with a CVSS score of 10, published 9 August 2024.

**Which products and versions are affected?** org.openhab.ui.bundles:org.openhab.ui.cometvisu (Maven) >= 3.4.0.M4, <= 4.2.0, ECOSYSTEM:introduced=3.4.0.M4,fixed=4.2.1; openHAB CometVisu UI >= 3.4.0.M4, <= 4.2.0.

**Is there a fix for CVE-2024-42467?** Yes. org.openhab.ui.bundles:org.openhab.ui.cometvisu (Maven): upgrade to 4.2.1 or later. Junglewise finds every place you run it, drafts the upgrade and applies it once you approve.

**How is CVE-2024-42467 attacked?** It is attacked over the network, in a network appliance.

**Am I affected by CVE-2024-42467?** Check whether you run org.openhab.ui.bundles:org.openhab.ui.cometvisu (Maven) or openHAB CometVisu UI at an affected version. Junglewise does that check for you around the clock: connect your code, cloud and domains, and it matches new vulnerabilities like this one against what you actually run and tells you when one reaches you.

## How to fix

- org.openhab.ui.bundles:org.openhab.ui.cometvisu (Maven): upgrade to 4.2.1 or later

  ```sh
  # set org.openhab.ui.bundles:org.openhab.ui.cometvisu to 4.2.1 in your pom.xml or build.gradle
  ```


## Technical details

The ProxyResource.java component in the CometVisu backend fails to implement authentication or proper validation on its proxy endpoint. This allows unauthenticated attackers to perform Server-Side Request Forgery (SSRF) by inducing GET requests to internal-only servers. Additionally, the endpoint is vulnerable to Cross-Site Scripting (XSS) because it can be forced to fetch and serve malicious JavaScript from an attacker-controlled server, which then executes in the context of the CometVisu UI origin. When chained with other vulnerabilities, this can lead to Remote Code Execution (RCE). The issue is fixed in version 4.2.1.

## Affected products

- openHAB openHAB CometVisu UI >= 3.4.0.M4, <= 4.2.0

## Identifiers

- CVE-2024-42467
- GHSA-v7gr-mqpj-wwh3

## Timeline

- 2024-08-09: advisory: GHSA-v7gr-mqpj-wwh3 published
- 2024-08-09: patched: Fix released in version 4.2.1
- 2024-08-12: disclosed: CVE-2024-42467 assigned

## References

- [https://api.github.com/users/p-](https://api.github.com/users/p-)
- [https://github.com/p-](https://github.com/p-)
- [https://api.github.com/users/p-/gists%7B/gist_id%7D](https://api.github.com/users/p-/gists%7B/gist_id%7D)
- [https://api.github.com/users/p-/repos](https://api.github.com/users/p-/repos)
- [https://avatars.githubusercontent.com/u/176818?v=4](https://avatars.githubusercontent.com/u/176818?v=4)
- [https://api.github.com/users/p-/events%7B/privacy%7D](https://api.github.com/users/p-/events%7B/privacy%7D)

## Related threats

- [CometVisu Backend for openHAB has a path traversal vulnerability](https://junglewise.ai/threats/cve-2024-42468-cometvisu-backend-for-openhab-has-a-path-traversal-vulnerability)
- [CometVisu Backend for openHAB affected by RCE through path traversal](https://junglewise.ai/threats/cve-2024-42469-cometvisu-backend-for-openhab-affected-by-rce-through-path)
- [CometVisu Backend for openHAB has a sensitive information disclosure vulnerability](https://junglewise.ai/threats/cve-2024-42470-cometvisu-backend-for-openhab-has-a-sensitive-information)