590 matches found
CVE-2024-55466
An arbitrary file upload vulnerability in the Image Gallery of ThingsBoard Community, ThingsBoard Cloud and ThingsBoard Professional v3.8.1 allows attackers to execute arbitrary code via uploading a crafted file...
CVE-2024-55466
An arbitrary file upload vulnerability in the Image Gallery of ThingsBoard Community, ThingsBoard Cloud and ThingsBoard Professional v3.8.1 allows attackers to execute arbitrary code via uploading a crafted file...
CVE-2024-55466
The ThingsBoard IoT platform (Community, Cloud, and Professional editions) is vulnerable to an arbitrary file upload vulnerability in the Image Gallery feature (version 3.8.1 and below ). While some descriptions suggest arbitrary code execution, detailed research reveals the root cause is Stored ...
CVE-2024-55466: Improper Neutralization of Special Elements used in a Command
An arbitrary file upload vulnerability in the Image Gallery of ThingsBoard Community, ThingsBoard Cloud and ThingsBoard Professional v3.8.1 allows attackers to execute arbitrary code via uploading a crafted file...
CVE-2024-55466
An arbitrary file upload vulnerability in the Image Gallery of ThingsBoard Community, ThingsBoard Cloud and ThingsBoard Professional v3.8.1 allows attackers to execute arbitrary code via uploading a crafted file...
CVE-2024-55466
An arbitrary file upload vulnerability in the Image Gallery of ThingsBoard Community, ThingsBoard Cloud and ThingsBoard Professional v3.8.1 allows attackers to execute arbitrary code via uploading a crafted file...
PT-2025-20736 · Unknown · Thingsboard
Name of the Vulnerable Software and Affected Versions: ThingsBoard versions 3.8.1 and below Description: An arbitrary file upload vulnerability in the Image Gallery of ThingsBoard allows attackers to execute arbitrary code via uploading a crafted file. Recommendations: For versions 3.8.1 and belo...
ThingsBoard security vulnerabilities
ThingsBoard is a Java-based platform for IOT devices for monitoring, management, and data collection by the ThingsBoard team. A security vulnerability exists in ThingsBoard version v3.8.1, which stems from allowing the uploading of arbitrary files in Image Gallery, which could lead to the executi...
CVE-2024-55466
An arbitrary file upload vulnerability in the Image Gallery of ThingsBoard Community, ThingsBoard Cloud and ThingsBoard Professional v3.8.1 allows attackers to execute arbitrary code via uploading a crafted file...
CVE-2025-22228 vulnerabilities
Vulnerabilities for packages: thingsboard, keycloak-config-cli...
GHSA-MG83-C7GQ-RV5C vulnerabilities
Vulnerabilities for packages: thingsboard, keycloak-config-cli...
CVE-2025-22228 vulnerabilities
Vulnerabilities for packages: camunda-zeebe, keycloak-config-cli, thingsboard...
GHSA-MG83-C7GQ-RV5C vulnerabilities
Vulnerabilities for packages: camunda-zeebe, keycloak-config-cli, thingsboard...
CVE-2020-36843 vulnerabilities
Vulnerabilities for packages: gradle, thingsboard, jenkins...
GHSA-P53J-G8PW-4W5F vulnerabilities
Vulnerabilities for packages: gradle, thingsboard, jenkins...
GHSA-83QJ-6FR2-VHQG vulnerabilities
Vulnerabilities for packages: thingsboard...
CVE-2025-24813 vulnerabilities
Vulnerabilities for packages: thingsboard...
CVE-2020-36843 vulnerabilities
Vulnerabilities for packages: conductor-fips, jenkins, conductor, thingsboard, gradle...