Lucene search
PRIOn knowledge basePRION:CVE-2023-45303HistoryOct 06, 2023 - 7:15 p.m.
Sql injection
2023-10-0619:15:00
PRIOn knowledge base
www.prio-n.com
6
thingsboard
sql injection
server-side template injection
apache freemarker
execute
/api/admin/settings
ThingsBoard before 3.5 allows Server-Side Template Injection if users are allowed to modify an email template, because Apache FreeMarker supports freemarker.template.utility.Execute (for content sent to the /api/admin/settings endpoint).
| CPE | Name | Operator | Version |
|---|---|---|---|
| thingsboard | lt | 3.5 |
Related
cvelist
cvelist
CVE-2023-45303
2023-10-06 00:00:00
cve
cve
CVE-2023-45303
2023-10-06 19:15:13
osv
osv
ThingsBoard Server-Side Template Injection
2023-10-06 21:30:49
CVE-2023-45303
2023-10-06 19:15:13
nvd
nvd
CVE-2023-45303
2023-10-06 19:15:13
github
github
ThingsBoard Server-Side Template Injection
2023-10-06 21:30:49
kitploit
kitploit
Cve-Collector - Simple Latest CVE Collector
2023-11-01 11:30:00