{"id":"CVE-2021-21266","details":"openHAB is a vendor and technology agnostic open source automation software for your home. In openHAB before versions 2.5.12 and 3.0.1 the XML external entity (XXE) attack allows attackers in the same network as the openHAB instance to retrieve internal information like the content of files from the file system. Responses to SSDP requests can be especially malicious. All add-ons that use SAX or JAXB parsing of externally received XML are potentially subject to this kind of attack. In openHAB, the following add-ons are potentially impacted: AvmFritz, BoseSoundtouch, DenonMarantz, DLinkSmarthome, Enigma2, FmiWeather, FSInternetRadio, Gce, Homematic, HPPrinter, IHC, Insteon, Onkyo, Roku, SamsungTV, Sonos, Roku, Tellstick, TR064, UPnPControl, Vitotronic, Wemo, YamahaReceiver and XPath Tranformation. The vulnerabilities have been fixed in versions 2.5.12 and 3.0.1 by a more strict configuration of the used XML parser.","aliases":["GHSA-r2hc-pmr7-4c9r"],"modified":"2026-07-09T10:11:57.221556Z","published":"2021-02-01T15:15:13.057Z","references":[{"type":"ADVISORY","url":"https://dev.to/brianverm/configure-your-java-xml-parsers-to-prevent-xxe-213c"},{"type":"ADVISORY","url":"https://www.contrastsecurity.com/security-influencers/xml-xxe-pitfalls-with-jaxb"},{"type":"FIX","url":"https://github.com/openhab/openhab-addons/commit/81935b0ab126e6d9aebd2f6c3fc67d82bb7e8b86"},{"type":"FIX","url":"https://github.com/openhab/openhab-addons/security/advisories/GHSA-r2hc-pmr7-4c9r"}],"affected":[{"ranges":[{"type":"GIT","repo":"https://github.com/openhab/openhab-addons","events":[{"introduced":"0"},{"fixed":"1ff9a5fa8cd91aaa91d34da65b675dc19fac7de5"},{"introduced":"2f9e206314f371115992795b306a76a500192418"},{"last_affected":"2f9e206314f371115992795b306a76a500192418"},{"fixed":"81935b0ab126e6d9aebd2f6c3fc67d82bb7e8b86"}],"database_specific":{"extracted_events":[{"introduced":"0"},{"fixed":"2.5.12"},{"introduced":"3.0.0"},{"last_affected":"3.0.0"}],"source":["CPE_RANGE","CPE_STRING","REFERENCES"],"cpe":["cpe:2.3:a:openhab:openhab:*:*:*:*:*:*:*:*","cpe:2.3:a:openhab:openhab:3.0.0:*:*:*:*:*:*:*"]}}],"versions":["3.0.0"],"database_specific":{"source":"https://storage.googleapis.com/cve-osv-conversion/osv-output/CVE-2021-21266.json","vanir_signatures_modified":"2026-07-09T10:11:57Z","vanir_signatures":[{"deprecated":false,"digest":{"function_hash":"42121241997728825809967938444672088269","length":199},"id":"CVE-2021-21266-00a36524","signature_type":"Function","signature_version":"v1","source":"https://github.com/openhab/openhab-addons/commit/81935b0ab126e6d9aebd2f6c3fc67d82bb7e8b86","target":{"file":"bundles/org.openhab.binding.fmiweather/src/main/java/org/openhab/binding/fmiweather/internal/client/Client.java","function":"Client"}},{"deprecated":false,"digest":{"line_hashes":["188600770480709514148788280317319917255","329641630565073759903317857659902051500","117998053406487554557912531006464356448","158217426230304580730693838092262343109","201487375960877111478442999120465647314","163420226415489248956179361275572057854","81466538038575678591325834094396755118","180732377176055562343552376277484741277","18711089349865646846158972135341490634","60765479895887419958278067131007280494","260678897639136031586422803008110298722","35938161024853421324582516601027328676","277002131067301051303907675445802026636"],"threshold":0.9},"id":"CVE-2021-21266-0247af75","signature_type":"Line","signature_version":"v1","source":"https://github.com/openhab/openhab-addons/commit/81935b0ab126e6d9aebd2f6c3fc67d82bb7e8b86","target":{"file":"bundles/org.openhab.binding.hpprinter/src/main/java/org/openhab/binding/hpprinter/internal/api/HPWebServerClient.java"}},{"signature_type":"Line","signature_version":"v1","source":"https://github.com/openhab/openhab-addons/commit/81935b0ab126e6d9aebd2f6c3fc67d82bb7e8b86","target":{"file":"bundles/org.openhab.binding.fmiweather/src/main/java/org/openhab/binding/fmiweather/internal/client/Client.java"},"deprecated":false,"digest":{"line_hashes":["81693910972696154716523199125132739159","322041962932713266130789047145533429352","318294952314831334256396020922762760624","144764020762677656165280518478678841021"],"threshold":0.9},"id":"CVE-2021-21266-03fcd32f"},{"source":"https://github.com/openhab/openhab-addons/commit/81935b0ab126e6d9aebd2f6c3fc67d82bb7e8b86","target":{"file":"bundles/org.openhab.binding.ihc/src/main/java/org/openhab/binding/ihc/internal/ws/projectfile/ProjectFileUtils.java","function":"readFromFile"},"deprecated":false,"digest":{"function_hash":"32521534808407635246319200367107329298","length":311},"id":"CVE-2021-21266-0409a88e","signature_type":"Function","signature_version":"v1"},{"deprecated":false,"digest":{"function_hash":"306905000727156302174141524253900386442","length":357},"id":"CVE-2021-21266-0c4fb356","signature_type":"Function","signature_version":"v1","source":"https://github.com/openhab/openhab-addons/commit/81935b0ab126e6d9aebd2f6c3fc67d82bb7e8b86","target":{"function":"xml","file":"bundles/org.openhab.binding.yamahareceiver/src/main/java/org/openhab/binding/yamahareceiver/internal/protocol/xml/XMLUtils.java"}},{"id":"CVE-2021-21266-0c611b2b","signature_type":"Line","signature_version":"v1","source":"https://github.com/openhab/openhab-addons/commit/81935b0ab126e6d9aebd2f6c3fc67d82bb7e8b86","target":{"file":"bundles/org.openhab.binding.gce/src/main/java/org/openhab/binding/gce/internal/model/StatusFileInterpreter.java"},"deprecated":false,"digest":{"line_hashes":["210206168058658267881270423488489369215","53079099393291420698171339627442521727","114194209158774695705073918725760806548","214900291376645469314369333287257722439"],"threshold":0.9}},{"id":"CVE-2021-21266-0e30ea05","signature_type":"Function","signature_version":"v1","source":"https://github.com/openhab/openhab-addons/commit/81935b0ab126e6d9aebd2f6c3fc67d82bb7e8b86","target":{"file":"bundles/org.openhab.binding.denonmarantz/src/main/java/org/openhab/binding/denonmarantz/internal/handler/DenonMarantzHandler.java","function":"autoConfigure"},"deprecated":false,"digest":{"function_hash":"126292927001929717583966873756680060808","length":2733}},{"deprecated":false,"digest":{"line_hashes":["329279660631591506551148728823466482204","257779124560780840702660935890987807299","271665314977830943137942505189546675924","104326020151627704305511603154123582985"],"threshold":0.9},"id":"CVE-2021-21266-0fd2053a","signature_type":"Line","signature_version":"v1","source":"https://github.com/openhab/openhab-addons/commit/81935b0ab126e6d9aebd2f6c3fc67d82bb7e8b86","target":{"file":"bundles/org.openhab.binding.insteon/src/main/java/org/openhab/binding/insteon/internal/device/FeatureTemplateLoader.java"}},{"signature_type":"Line","signature_version":"v1","source":"https://github.com/openhab/openhab-addons/commit/81935b0ab126e6d9aebd2f6c3fc67d82bb7e8b86","target":{"file":"bundles/org.openhab.binding.fsinternetradio/src/main/java/org/openhab/binding/fsinternetradio/internal/radio/FrontierSiliconRadioApiResult.java"},"deprecated":false,"digest":{"line_hashes":["77535526163395023681329691258104102204","164955332507241419666522218455156384828","168743735309794362351838834425762760862","285352356567410481928297263127021202266"],"threshold":0.9},"id":"CVE-2021-21266-1394ac2f"},{"target":{"file":"bundles/org.openhab.binding.wemo/src/main/java/org/openhab/binding/wemo/internal/handler/WemoHolmesHandler.java"},"deprecated":false,"digest":{"line_hashes":["260663437739711891301849022972122641341","92435860217225926898341909690583844587","187401460139972563744579885871181686088","102972510835395431496116895367859513479"],"threshold":0.9},"id":"CVE-2021-21266-184161b7","signature_type":"Line","signature_version":"v1","source":"https://github.com/openhab/openhab-addons/commit/81935b0ab126e6d9aebd2f6c3fc67d82bb7e8b86"},{"deprecated":false,"digest":{"function_hash":"182893041077978679049701652512020095802","length":3790},"id":"CVE-2021-21266-1c76ec2a","signature_type":"Function","signature_version":"v1","source":"https://github.com/openhab/openhab-addons/commit/81935b0ab126e6d9aebd2f6c3fc67d82bb7e8b86","target":{"file":"bundles/org.openhab.binding.wemo/src/main/java/org/openhab/binding/wemo/internal/discovery/WemoLinkDiscoveryService.java","function":"startScan"}},{"signature_type":"Line","signature_version":"v1","source":"https://github.com/openhab/openhab-addons/commit/81935b0ab126e6d9aebd2f6c3fc67d82bb7e8b86","target":{"file":"bundles/org.openhab.binding.avmfritz/src/main/java/org/openhab/binding/avmfritz/internal/hardware/callbacks/FritzAhaUpdateTemplatesCallback.java"},"deprecated":false,"digest":{"line_hashes":["214931425725045877563343128955972250856","254560531904097090549161512788018136749","223046292242610658028268051612650817608","96890541480830038263491658205388144506","283321261450188260542000964101353770086","197226860303468367418162980489533499584","101780042347079993193069766370076836108","69120002802911540983454390002721177166","86297811834389432183620063024400584137","333152085598635253038509286777361005448","239792890718322741189421627186278847586","33925104245153120730218218239075490788","65745378073003061610943591751949361048","284293530441162585298823763016762602654","300863081874074307849964121875528571503","62522465024291592052695778075162142032"],"threshold":0.9},"id":"CVE-2021-21266-21127dba"},{"id":"CVE-2021-21266-2a3d81b3","signature_type":"Function","signature_version":"v1","source":"https://github.com/openhab/openhab-addons/commit/81935b0ab126e6d9aebd2f6c3fc67d82bb7e8b86","target":{"file":"bundles/org.openhab.binding.onkyo/src/main/java/org/openhab/binding/onkyo/internal/handler/OnkyoHandler.java","function":"processInfo"},"deprecated":false,"digest":{"function_hash":"160372187800115398271892873163567525975","length":448}},{"signature_version":"v1","source":"https://github.com/openhab/openhab-addons/commit/81935b0ab126e6d9aebd2f6c3fc67d82bb7e8b86","target":{"file":"bundles/org.openhab.binding.wemo/src/main/java/org/openhab/binding/wemo/internal/handler/WemoCoffeeHandler.java"},"deprecated":false,"digest":{"line_hashes":["225042417016617882901830040064821775230","92435860217225926898341909690583844587","187401460139972563744579885871181686088","102972510835395431496116895367859513479"],"threshold":0.9},"id":"CVE-2021-21266-2b3ea7f6","signature_type":"Line"},{"target":{"file":"bundles/org.openhab.binding.ihc/src/main/java/org/openhab/binding/ihc/internal/ws/projectfile/ProjectFileUtils.java"},"deprecated":false,"digest":{"threshold":0.9,"line_hashes":["229382869737330496400592384405526603028","84171512369233455235813737131797141064","37201856895901175389798967206322340458","79279325931866937847763665735851679989"]},"id":"CVE-2021-21266-3016b871","signature_type":"Line","signature_version":"v1","source":"https://github.com/openhab/openhab-addons/commit/81935b0ab126e6d9aebd2f6c3fc67d82bb7e8b86"},{"deprecated":false,"digest":{"threshold":0.9,"line_hashes":["165580069725751337521196682603329836172","129948876738767326758602114295294388154","131310215914381051737018926153082630820","180658025246273798285992222092046049322"]},"id":"CVE-2021-21266-359de397","signature_type":"Line","signature_version":"v1","source":"https://github.com/openhab/openhab-addons/commit/81935b0ab126e6d9aebd2f6c3fc67d82bb7e8b86","target":{"file":"bundles/org.openhab.binding.onkyo/src/main/java/org/openhab/binding/onkyo/internal/handler/OnkyoHandler.java"}},{"signature_version":"v1","source":"https://github.com/openhab/openhab-addons/commit/81935b0ab126e6d9aebd2f6c3fc67d82bb7e8b86","target":{"file":"bundles/org.openhab.binding.tellstick/src/main/java/org/openhab/binding/tellstick/internal/live/TelldusLiveDeviceController.java","function":"innerCallRest"},"deprecated":false,"digest":{"function_hash":"92731435921693986453713396810768560089","length":667},"id":"CVE-2021-21266-3763c014","signature_type":"Function"},{"target":{"file":"bundles/org.openhab.transform.xpath/src/main/java/org/openhab/transform/xpath/internal/XPathTransformationService.java"},"deprecated":false,"digest":{"line_hashes":["291661168691715657193493260827484344972","162493518866090535527907022664322339123","61885982370973864552638720275972374962","244519563286155003850250416403288989740"],"threshold":0.9},"id":"CVE-2021-21266-383a6cd0","signature_type":"Line","signature_version":"v1","source":"https://github.com/openhab/openhab-addons/commit/81935b0ab126e6d9aebd2f6c3fc67d82bb7e8b86"},{"signature_version":"v1","source":"https://github.com/openhab/openhab-addons/commit/81935b0ab126e6d9aebd2f6c3fc67d82bb7e8b86","target":{"file":"bundles/org.openhab.binding.bosesoundtouch/src/main/java/org/openhab/binding/bosesoundtouch/internal/XMLResponseProcessor.java"},"deprecated":false,"digest":{"line_hashes":["90950407226963885686543309971320298655","80674965077302600279525931992623060828","268717176211214154830706441287139476557","169469676326606478079289926769927133042"],"threshold":0.9},"id":"CVE-2021-21266-41047fe6","signature_type":"Line"},{"digest":{"function_hash":"150465145479202023612720178617769282050","length":5120},"id":"CVE-2021-21266-4e2b94ee","signature_type":"Function","signature_version":"v1","source":"https://github.com/openhab/openhab-addons/commit/81935b0ab126e6d9aebd2f6c3fc67d82bb7e8b86","target":{"file":"bundles/org.openhab.binding.wemo/src/main/java/org/openhab/binding/wemo/internal/handler/WemoHolmesHandler.java","function":"updateWemoState"},"deprecated":false},{"target":{"file":"bundles/org.openhab.binding.avmfritz/src/main/java/org/openhab/binding/avmfritz/internal/hardware/callbacks/FritzAhaUpdateTemplatesCallback.java","function":"execute"},"deprecated":false,"digest":{"function_hash":"324958823657377536126257754836904577844","length":610},"id":"CVE-2021-21266-546637df","signature_type":"Function","signature_version":"v1","source":"https://github.com/openhab/openhab-addons/commit/81935b0ab126e6d9aebd2f6c3fc67d82bb7e8b86"},{"source":"https://github.com/openhab/openhab-addons/commit/81935b0ab126e6d9aebd2f6c3fc67d82bb7e8b86","target":{"file":"bundles/org.openhab.binding.samsungtv/src/main/java/org/openhab/binding/samsungtv/internal/service/SamsungTvUtils.java","function":"loadXMLFromString"},"deprecated":false,"digest":{"function_hash":"91881706892074478525682295772513976906","length":281},"id":"CVE-2021-21266-546dc877","signature_type":"Function","signature_version":"v1"},{"source":"https://github.com/openhab/openhab-addons/commit/81935b0ab126e6d9aebd2f6c3fc67d82bb7e8b86","target":{"file":"bundles/org.openhab.binding.fsinternetradio/src/main/java/org/openhab/binding/fsinternetradio/internal/radio/FrontierSiliconRadioApiResult.java","function":"getXmlDocFromString"},"deprecated":false,"digest":{"function_hash":"272781092923212055079175288896048252147","length":271},"id":"CVE-2021-21266-58fa6d8b","signature_type":"Function","signature_version":"v1"},{"deprecated":false,"digest":{"length":909,"function_hash":"215932247653353809906372743508277622345"},"id":"CVE-2021-21266-5a8c1506","signature_type":"Function","signature_version":"v1","source":"https://github.com/openhab/openhab-addons/commit/81935b0ab126e6d9aebd2f6c3fc67d82bb7e8b86","target":{"function":"execute","file":"bundles/org.openhab.binding.avmfritz/src/main/java/org/openhab/binding/avmfritz/internal/hardware/callbacks/FritzAhaUpdateCallback.java"}},{"deprecated":false,"digest":{"function_hash":"33369287189052405958745804914349791585","length":945},"id":"CVE-2021-21266-6af44d62","signature_type":"Function","signature_version":"v1","source":"https://github.com/openhab/openhab-addons/commit/81935b0ab126e6d9aebd2f6c3fc67d82bb7e8b86","target":{"file":"bundles/org.openhab.transform.xpath/src/main/java/org/openhab/transform/xpath/internal/XPathTransformationService.java","function":"transform"}},{"target":{"file":"bundles/org.openhab.binding.dlinksmarthome/src/main/java/org/openhab/binding/dlinksmarthome/internal/DLinkHNAPCommunication.java"},"deprecated":false,"digest":{"line_hashes":["322549458681503107333259469356556902932","174723713434379499904300403647593467096","52813691568376973064345355819708180991","214331568072612884304704053412028618616"],"threshold":0.9},"id":"CVE-2021-21266-6b86336e","signature_type":"Line","signature_version":"v1","source":"https://github.com/openhab/openhab-addons/commit/81935b0ab126e6d9aebd2f6c3fc67d82bb7e8b86"},{"signature_type":"Line","signature_version":"v1","source":"https://github.com/openhab/openhab-addons/commit/81935b0ab126e6d9aebd2f6c3fc67d82bb7e8b86","target":{"file":"bundles/org.openhab.binding.avmfritz/src/main/java/org/openhab/binding/avmfritz/internal/hardware/callbacks/FritzAhaUpdateCallback.java"},"deprecated":false,"digest":{"line_hashes":["214931425725045877563343128955972250856","254560531904097090549161512788018136749","219532863755423662643396145057124500794","118643085511386296237490222817788441298","76138361282639965945854267042302044692","29380141955928998731020514515649706644","18480813658687307122052250244282991689","300417796101315708121029762212318173195","257456399317322654157047726539606064009","214855137699465349033088004615347493782","293722119063290103139921134447420730877","275299526402073422859838908021227109531","50075122077920073034735371682952682781","43965478232010346429680541711748689103","254074362676113460954536632637093897359","101249865000072935063193282694927218907","37967467414668598389002392633020245535"],"threshold":0.9},"id":"CVE-2021-21266-74fbc0a5"},{"deprecated":false,"digest":{"line_hashes":["79740536956212851362329904942664677122","163878775209888999760396557010229969522","247770555921620176432789373701888627854","213680521384884113377442574674104582389","181059445848328355319381112053481210183"],"threshold":0.9},"id":"CVE-2021-21266-76ef28f1","signature_type":"Line","signature_version":"v1","source":"https://github.com/openhab/openhab-addons/commit/81935b0ab126e6d9aebd2f6c3fc67d82bb7e8b86","target":{"file":"bundles/org.openhab.binding.enigma2/src/main/java/org/openhab/binding/enigma2/internal/Enigma2Client.java"}},{"signature_type":"Line","signature_version":"v1","source":"https://github.com/openhab/openhab-addons/commit/81935b0ab126e6d9aebd2f6c3fc67d82bb7e8b86","target":{"file":"bundles/org.openhab.binding.yamahareceiver/src/main/java/org/openhab/binding/yamahareceiver/internal/protocol/xml/XMLUtils.java"},"deprecated":false,"digest":{"line_hashes":["28240385902298029066284735124485539492","240903521765227928670231006657852789437","177330973801959654696824309203571028072","211988992176398281377484270277684049592"],"threshold":0.9},"id":"CVE-2021-21266-7c376938"},{"signature_type":"Line","signature_version":"v1","source":"https://github.com/openhab/openhab-addons/commit/81935b0ab126e6d9aebd2f6c3fc67d82bb7e8b86","target":{"file":"bundles/org.openhab.binding.tellstick/src/main/java/org/openhab/binding/tellstick/internal/live/TelldusLiveDeviceController.java"},"deprecated":false,"digest":{"line_hashes":["328923172903939099332018447286450409706","83117282248061436135366099259914027710","158748377122419499852204851954607701579","36319184665123847600631576647323765756"],"threshold":0.9},"id":"CVE-2021-21266-817a674b"},{"deprecated":false,"digest":{"line_hashes":["336364851291786947186860694642030651811","241515572901455541595606877651326486260","133447928540380607468627413935617777921","239712082002203838098020176609158202807"],"threshold":0.9},"id":"CVE-2021-21266-8199c045","signature_type":"Line","signature_version":"v1","source":"https://github.com/openhab/openhab-addons/commit/81935b0ab126e6d9aebd2f6c3fc67d82bb7e8b86","target":{"file":"bundles/org.openhab.binding.homematic/src/main/java/org/openhab/binding/homematic/internal/communicator/message/XmlRpcResponse.java"}},{"target":{"file":"bundles/org.openhab.binding.sonos/src/main/java/org/openhab/binding/sonos/internal/SonosXMLParser.java","function":"getResourceMetaData"},"deprecated":false,"digest":{"function_hash":"123393434949696611706095202352554273380","length":477},"id":"CVE-2021-21266-8667cc05","signature_type":"Function","signature_version":"v1","source":"https://github.com/openhab/openhab-addons/commit/81935b0ab126e6d9aebd2f6c3fc67d82bb7e8b86"},{"deprecated":false,"digest":{"line_hashes":["110255834423948047673500786978277666838","135772417859508776555443902889498635852","84115134058645818378352124455029147000","12641562687525569190272869508078183157"],"threshold":0.9},"id":"CVE-2021-21266-9025e78b","signature_type":"Line","signature_version":"v1","source":"https://github.com/openhab/openhab-addons/commit/81935b0ab126e6d9aebd2f6c3fc67d82bb7e8b86","target":{"file":"bundles/org.openhab.binding.insteon/src/main/java/org/openhab/binding/insteon/internal/device/DeviceTypeLoader.java"}},{"deprecated":false,"digest":{"line_hashes":["193378790033524891239995977936086909509","336822232117461765673110468243306153405","305305351261038909837811705588551629463","218561293753285950793504451608683372553"],"threshold":0.9},"id":"CVE-2021-21266-935d8708","signature_type":"Line","signature_version":"v1","source":"https://github.com/openhab/openhab-addons/commit/81935b0ab126e6d9aebd2f6c3fc67d82bb7e8b86","target":{"file":"bundles/org.openhab.binding.denonmarantz/src/main/java/org/openhab/binding/denonmarantz/internal/connector/http/DenonMarantzHttpConnector.java"}},{"digest":{"function_hash":"296936014154453844217916633140732111145","length":799},"id":"CVE-2021-21266-96d8a2da","signature_type":"Function","signature_version":"v1","source":"https://github.com/openhab/openhab-addons/commit/81935b0ab126e6d9aebd2f6c3fc67d82bb7e8b86","target":{"file":"bundles/org.openhab.binding.insteon/src/main/java/org/openhab/binding/insteon/internal/device/FeatureTemplateLoader.java","function":"readTemplates"},"deprecated":false},{"deprecated":false,"digest":{"function_hash":"137544623282133020408072187613199322666","length":280},"id":"CVE-2021-21266-98031bc9","signature_type":"Function","signature_version":"v1","source":"https://github.com/openhab/openhab-addons/commit/81935b0ab126e6d9aebd2f6c3fc67d82bb7e8b86","target":{"file":"bundles/org.openhab.binding.homematic/src/main/java/org/openhab/binding/homematic/internal/communicator/message/XmlRpcResponse.java","function":"XmlRpcResponse"}},{"signature_type":"Line","signature_version":"v1","source":"https://github.com/openhab/openhab-addons/commit/81935b0ab126e6d9aebd2f6c3fc67d82bb7e8b86","target":{"file":"bundles/org.openhab.binding.samsungtv/src/main/java/org/openhab/binding/samsungtv/internal/service/SamsungTvUtils.java"},"deprecated":false,"digest":{"line_hashes":["58418551842261310367441543863265225839","38271034036619885082498854273416595489","149574561454793168224561264213707165716","251053571692222433512662335518446233402"],"threshold":0.9},"id":"CVE-2021-21266-9c72d62c"},{"digest":{"line_hashes":["59892806607825555292830114925903761504","43165625384280243975369713093640467326","179171644089352520706817548536914990779","80847699636136932733699616790620217359"],"threshold":0.9},"id":"CVE-2021-21266-af417530","signature_type":"Line","signature_version":"v1","source":"https://github.com/openhab/openhab-addons/commit/81935b0ab126e6d9aebd2f6c3fc67d82bb7e8b86","target":{"file":"bundles/org.openhab.binding.sonos/src/main/java/org/openhab/binding/sonos/internal/SonosXMLParser.java"},"deprecated":false},{"source":"https://github.com/openhab/openhab-addons/commit/81935b0ab126e6d9aebd2f6c3fc67d82bb7e8b86","target":{"file":"bundles/org.openhab.binding.vitotronic/src/main/java/org/openhab/binding/vitotronic/internal/handler/VitotronicBridgeHandler.java"},"deprecated":false,"digest":{"threshold":0.9,"line_hashes":["264573251586905773882894507438277764982","223277275965344492590997404003542415086","253775759951392742783724483213913761178","59604165865440419391788440914529224791"]},"id":"CVE-2021-21266-b488ebb7","signature_type":"Line","signature_version":"v1"},{"digest":{"function_hash":"88947599546861057736789613805636966718","length":4270},"id":"CVE-2021-21266-b6ffa243","signature_type":"Function","signature_version":"v1","source":"https://github.com/openhab/openhab-addons/commit/81935b0ab126e6d9aebd2f6c3fc67d82bb7e8b86","target":{"function":"updateWemoState","file":"bundles/org.openhab.binding.wemo/src/main/java/org/openhab/binding/wemo/internal/handler/WemoCoffeeHandler.java"},"deprecated":false},{"deprecated":false,"digest":{"function_hash":"184609492983549682924583959646676984400","length":537},"id":"CVE-2021-21266-b8a4958a","signature_type":"Function","signature_version":"v1","source":"https://github.com/openhab/openhab-addons/commit/81935b0ab126e6d9aebd2f6c3fc67d82bb7e8b86","target":{"file":"bundles/org.openhab.binding.gce/src/main/java/org/openhab/binding/gce/internal/model/StatusFileInterpreter.java","function":"read"}},{"source":"https://github.com/openhab/openhab-addons/commit/81935b0ab126e6d9aebd2f6c3fc67d82bb7e8b86","target":{"file":"bundles/org.openhab.binding.wemo/src/main/java/org/openhab/binding/wemo/internal/handler/WemoMakerHandler.java"},"deprecated":false,"digest":{"line_hashes":["334733551221694358699254808285280456651","50292354651968930325558182363212088405","187401460139972563744579885871181686088","102972510835395431496116895367859513479"],"threshold":0.9},"id":"CVE-2021-21266-bd783ab5","signature_type":"Line","signature_version":"v1"},{"target":{"file":"bundles/org.openhab.binding.wemo/src/main/java/org/openhab/binding/wemo/internal/handler/WemoMakerHandler.java","function":"updateWemoState"},"deprecated":false,"digest":{"function_hash":"30771431895125281862465490175136722870","length":2390},"id":"CVE-2021-21266-bfa9a0d8","signature_type":"Function","signature_version":"v1","source":"https://github.com/openhab/openhab-addons/commit/81935b0ab126e6d9aebd2f6c3fc67d82bb7e8b86"},{"target":{"file":"bundles/org.openhab.binding.enigma2/src/main/java/org/openhab/binding/enigma2/internal/Enigma2Client.java","function":"Enigma2Client"},"deprecated":false,"digest":{"function_hash":"164733032989065787995846359455578380614","length":388},"id":"CVE-2021-21266-c3de7f21","signature_type":"Function","signature_version":"v1","source":"https://github.com/openhab/openhab-addons/commit/81935b0ab126e6d9aebd2f6c3fc67d82bb7e8b86"},{"deprecated":false,"digest":{"function_hash":"49468055415529165266447438598618469048","length":838},"id":"CVE-2021-21266-ccdffb4a","signature_type":"Function","signature_version":"v1","source":"https://github.com/openhab/openhab-addons/commit/81935b0ab126e6d9aebd2f6c3fc67d82bb7e8b86","target":{"file":"bundles/org.openhab.binding.insteon/src/main/java/org/openhab/binding/insteon/internal/message/XMLMessageReader.java","function":"readMessageDefinitions"}},{"target":{"file":"bundles/org.openhab.binding.hpprinter/src/main/java/org/openhab/binding/hpprinter/internal/api/HPWebServerClient.java","function":"getDocument"},"deprecated":false,"digest":{"length":219,"function_hash":"318301443415660760021721378568632442958"},"id":"CVE-2021-21266-cdff5357","signature_type":"Function","signature_version":"v1","source":"https://github.com/openhab/openhab-addons/commit/81935b0ab126e6d9aebd2f6c3fc67d82bb7e8b86"},{"digest":{"function_hash":"25748672786008092909148008176545849867","length":1002},"id":"CVE-2021-21266-d1330775","signature_type":"Function","signature_version":"v1","source":"https://github.com/openhab/openhab-addons/commit/81935b0ab126e6d9aebd2f6c3fc67d82bb7e8b86","target":{"file":"bundles/org.openhab.binding.dlinksmarthome/src/main/java/org/openhab/binding/dlinksmarthome/internal/DLinkHNAPCommunication.java","function":"DLinkHNAPCommunication"},"deprecated":false},{"deprecated":false,"digest":{"function_hash":"133854812540288740441880550546524736569","length":241},"id":"CVE-2021-21266-de621a93","signature_type":"Function","signature_version":"v1","source":"https://github.com/openhab/openhab-addons/commit/81935b0ab126e6d9aebd2f6c3fc67d82bb7e8b86","target":{"file":"bundles/org.openhab.binding.bosesoundtouch/src/main/java/org/openhab/binding/bosesoundtouch/internal/XMLResponseProcessor.java","function":"handleMessage"}},{"digest":{"function_hash":"81265315152813168478593292934623655406","length":536},"id":"CVE-2021-21266-e18d102d","signature_type":"Function","signature_version":"v1","source":"https://github.com/openhab/openhab-addons/commit/81935b0ab126e6d9aebd2f6c3fc67d82bb7e8b86","target":{"file":"bundles/org.openhab.binding.insteon/src/main/java/org/openhab/binding/insteon/internal/device/DeviceTypeLoader.java","function":"loadDeviceTypesXML"},"deprecated":false},{"signature_version":"v1","source":"https://github.com/openhab/openhab-addons/commit/81935b0ab126e6d9aebd2f6c3fc67d82bb7e8b86","target":{"file":"bundles/org.openhab.binding.avmfritz/src/main/java/org/openhab/binding/avmfritz/internal/util/JAXBUtils.java"},"deprecated":false,"digest":{"line_hashes":["121008612534034076908578076198846156001","78208868554347708410111783864858260913","339481772132196211453961270545364759878","278035128348638924058334343899803527900","153564180866304573067489688281859666294","143260941775869619725281247661164283543","188053503522268143653197297868505668087","187378643981259967575684715157503436504","43693651672511506419582617180681485734"],"threshold":0.9},"id":"CVE-2021-21266-e43d4294","signature_type":"Line"},{"signature_version":"v1","source":"https://github.com/openhab/openhab-addons/commit/81935b0ab126e6d9aebd2f6c3fc67d82bb7e8b86","target":{"file":"bundles/org.openhab.binding.wemo/src/main/java/org/openhab/binding/wemo/internal/discovery/WemoLinkDiscoveryService.java"},"deprecated":false,"digest":{"line_hashes":["25345899252610809744279122689065937126","285133445454292607382773542259577586471","260425254051162815281557555683454547430","102972510835395431496116895367859513479"],"threshold":0.9},"id":"CVE-2021-21266-e606b072","signature_type":"Line"},{"deprecated":false,"digest":{"function_hash":"253274611038968730233561699196750757408","length":920},"id":"CVE-2021-21266-ef7a063c","signature_type":"Function","signature_version":"v1","source":"https://github.com/openhab/openhab-addons/commit/81935b0ab126e6d9aebd2f6c3fc67d82bb7e8b86","target":{"file":"bundles/org.openhab.binding.denonmarantz/src/main/java/org/openhab/binding/denonmarantz/internal/connector/http/DenonMarantzHttpConnector.java","function":"getDocument"}},{"source":"https://github.com/openhab/openhab-addons/commit/81935b0ab126e6d9aebd2f6c3fc67d82bb7e8b86","target":{"file":"bundles/org.openhab.binding.insteon/src/main/java/org/openhab/binding/insteon/internal/message/XMLMessageReader.java"},"deprecated":false,"digest":{"line_hashes":["192217376103847234998552351321696460910","232401291394677442022037134649736514335","271665314977830943137942505189546675924","104326020151627704305511603154123582985"],"threshold":0.9},"id":"CVE-2021-21266-f0b35c17","signature_type":"Line","signature_version":"v1"},{"target":{"file":"bundles/org.openhab.binding.denonmarantz/src/main/java/org/openhab/binding/denonmarantz/internal/handler/DenonMarantzHandler.java"},"deprecated":false,"digest":{"line_hashes":["183439900451220848504575717787672063000","248197854850172557515819441997285206128","63556438759336965274095507116155310096","116376556960240516491354054301536317858","221301600176019920389471526830278223247"],"threshold":0.9},"id":"CVE-2021-21266-fa2c2cfc","signature_type":"Line","signature_version":"v1","source":"https://github.com/openhab/openhab-addons/commit/81935b0ab126e6d9aebd2f6c3fc67d82bb7e8b86"}]}},{"ranges":[{"type":"GIT","repo":"https://github.com/openhab/openhab-webui","events":[{"introduced":"0"},{"fixed":"0a7a0b542d91c8dd9111d460e2646bb8b70a5dd8"},{"introduced":"e0b59849426a0906ada35a9df103c2078111c923"},{"last_affected":"e0b59849426a0906ada35a9df103c2078111c923"}],"database_specific":{"cpe":["cpe:2.3:a:openhab:openhab:*:*:*:*:*:*:*:*","cpe:2.3:a:openhab:openhab:3.0.0:*:*:*:*:*:*:*"],"extracted_events":[{"introduced":"0"},{"fixed":"2.5.12"},{"introduced":"3.0.0"},{"last_affected":"3.0.0"}],"source":["CPE_RANGE","CPE_STRING"]}}],"versions":["3.0.0","2.5.0"],"database_specific":{"source":"https://storage.googleapis.com/cve-osv-conversion/osv-output/CVE-2021-21266.json"}}],"schema_version":"1.7.5","severity":[{"type":"CVSS_V3","score":"CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:C/C:L/I:N/A:N"}]}