Lucene search

K
cvelistMitreCVELIST:CVE-2022-48341
HistoryFeb 23, 2023 - 12:00 a.m.

CVE-2022-48341

2023-02-2300:00:00
mitre
www.cve.org
thingsboard
3.4.1
remote attacker
vertical privilege escalation
tenant administrator
system administrator
dashboard access
scope parameter

8.6 High

AI Score

Confidence

High

0.002 Low

EPSS

Percentile

52.6%

ThingsBoard 3.4.1 could allow a remote authenticated attacker to achieve Vertical Privilege Escalation. A Tenant Administrator can obtain System Administrator dashboard access by modifying the scope via the scopes parameter.

8.6 High

AI Score

Confidence

High

0.002 Low

EPSS

Percentile

52.6%

Related for CVELIST:CVE-2022-48341