Thingsboard 跨站脚本漏洞

Thingsboard is a Java-based platform for IOT devices for monitoring, management, and data collection from the Thingsboard team. A security vulnerability exists in Thingsboard version 3.3.1, which can be exploited by an attacker to put a script payload into the name of a rule node when creating th...

ThingsBoard 3.3.1 - Stored Cross-Site Scripting Vulnerability

Exploit Title: ThingsBoard 3.3.1 - Stored Cross-Site Scripting XSS within the description of a rule node Exploit Author: Steffen Langenfeld & Sebastian Biehler Vendor Homepage: https://thingsboard.io/ Software Link: https://github.com/thingsboard/thingsboard/releases/tag/v3.3.1 Version: 3.3.1...

GHSA-CQJ8-47CH-RVVQ vulnerabilities

Vulnerabilities for packages: thingsboard...

GHSA-CQJ8-47CH-RVVQ vulnerabilities

Vulnerabilities for packages: thingsboard...

GHSA-2QP4-G3Q3-F92W vulnerabilities

Vulnerabilities for packages: thingsboard...

GHSA-2QP4-G3Q3-F92W vulnerabilities

Vulnerabilities for packages: thingsboard...

CVE-2022-24329 vulnerabilities

Vulnerabilities for packages: thingsboard...

CVE-2022-24329 vulnerabilities

Vulnerabilities for packages: thingsboard...

GHSA-FG2V-W576-W4V3 vulnerabilities

Vulnerabilities for packages: thingsboard, celeborn, hadoop-client-modules, druid...

GHSA-FG2V-W576-W4V3 vulnerabilities

Vulnerabilities for packages: druid, thingsboard, celeborn...

CVE-2021-31684 vulnerabilities

Vulnerabilities for packages: thingsboard, celeborn, hadoop-client-modules, druid...

CVE-2021-31684 vulnerabilities

Vulnerabilities for packages: druid, thingsboard, celeborn...

CVE-2020-29582 vulnerabilities

Vulnerabilities for packages: thingsboard...

CVE-2020-29582 vulnerabilities

Vulnerabilities for packages: thingsboard...

Thingsboard Injection Vulnerability

Thingsboard is a Java-based platform for monitoring, management, and data collection of IOT devices from the Thingsboard team. A security vulnerability exists in versions prior to ThingsBoard v3.2 that stems from the injection of host headers in password reset emails. This allowed an attacker to...

CVE-2020-27687

ThingsBoard before v3.2 is vulnerable to Host header injection in password-reset emails. This allows an attacker to send malicious links in password-reset emails to victims, pointing to an attacker-controlled server. Lack of validation of the Host header allows this to happen...

CVE-2020-27687

ThingsBoard before v3.2 is vulnerable to Host header injection in password-reset emails. This allows an attacker to send malicious links in password-reset emails to victims, pointing to an attacker-controlled server. Lack of validation of the Host header allows this to happen...

Design/Logic Flaw

ThingsBoard before v3.2 is vulnerable to Host header injection in password-reset emails. This allows an attacker to send malicious links in password-reset emails to victims, pointing to an attacker-controlled server. Lack of validation of the Host header allows this to happen...

CVE-2020-27687

ThingsBoard before v3.2 is vulnerable to Host header injection in password-reset emails. This allows an attacker to send malicious links in password-reset emails to victims, pointing to an attacker-controlled server. Lack of validation of the Host header allows this to happen...

CVE-2020-27687

ThingsBoard before v3.2 is vulnerable to Host header injection in password-reset emails. The root cause is lack of validation of the Host header, enabling an attacker to embed a malicious link in a password-reset email that points to an attacker-controlled server. Impact per sources is high confi...