CVE:CVE-2023-27482
CNNVD:CNNVD-202303-627
Home Assistant是一套开源的家庭自动化管理系统。该系统主要用于控制家庭自动化设备。
Home Assistant Supervisor 2023.01.1之前版本存在授权问题漏洞，该漏洞源于存在身份验证绕过漏洞。
solution:Upgrade home-assistant home-assistant to a higher version than 2023.3.0,and avoid the version (,2023.3.0); Upgrade home-assistant supervisor to a higher version than 2023.03.1,and avoid the version (,2023.03.1)