CVE-2024-9358 ThingsBoard HTTP RPC API resource consumption

A vulnerability has been found in ThingsBoard up to 3.7.0 and classified as problematic. Affected by this vulnerability is an unknown functionality of the component HTTP RPC API. The manipulation leads to resource consumption. The attack can be launched remotely. The complexity of an attack is...

CVE-2024-9358 ThingsBoard HTTP RPC API resource consumption

A vulnerability has been found in ThingsBoard up to 3.7.0 and classified as problematic. Affected by this vulnerability is an unknown functionality of the component HTTP RPC API. The manipulation leads to resource consumption. The attack can be launched remotely. The complexity of an attack is...

CVE-2024-9358

CVE-2024-9358 affects ThingsBoard up to version 3.7.0 via the HTTP RPC API. The issue is described as a resource consumption vulnerability in an unknown functionality of the HTTP RPC API, exploitable remotely over a network with high attack complexity. Publicly disclosed exploit information is no...

CVE-2024-9358

A vulnerability has been found in ThingsBoard up to 3.7.0 and classified as problematic. Affected by this vulnerability is an unknown functionality of the component HTTP RPC API. The manipulation leads to resource consumption. The attack can be launched remotely. The complexity of an attack is...

CVE-2024-9358: Uncontrolled Resource Consumption

A vulnerability has been found in ThingsBoard up to 3.7.0 and classified as problematic. Affected by this vulnerability is an unknown functionality of the component HTTP RPC API. The manipulation leads to resource consumption. The attack can be launched remotely. The complexity of an attack is...

ThingsBoard 资源管理错误漏洞

ThingsBoard is a Java-based platform for IOT devices for monitoring, management, and data collection by the ThingsBoard team. A resource management error vulnerability exists in ThingsBoard 3.7.0 and earlier versions, which stems from a component HTTP RPC API that causes resource consumption...

PT-2024-39592

Name of the Vulnerable Software and Affected Versions ThingsBoard versions up to 3.7.0 Description A vulnerability has been found in the HTTP RPC API component of ThingsBoard, which can lead to resource consumption. The attack can be launched remotely, but the complexity of an attack is rather hi...

GHSA-CX7F-G6MP-7HQM vulnerabilities

Vulnerabilities for packages: thingsboard...

GHSA-CX7F-G6MP-7HQM vulnerabilities

Vulnerabilities for packages: kayenta, thingsboard, kayenta-fips...

CVE-2024-38816 vulnerabilities

Vulnerabilities for packages: thingsboard...

CVE-2024-38816 vulnerabilities

Vulnerabilities for packages: kayenta, thingsboard, kayenta-fips...

GHSA-M6FV-JMCG-4JFG vulnerabilities

Vulnerabilities for packages: kubeflow-pipelines, kubeflow-centraldashboard, arangodb, thingsboard, sqlpad, argo-workflows...

CVE-2024-43799 vulnerabilities

Vulnerabilities for packages: kubeflow-pipelines, kubeflow-centraldashboard, arangodb, thingsboard, sqlpad, argo-workflows...

GHSA-9WV6-86V2-598J vulnerabilities

Vulnerabilities for packages: thingsboard, kubeflow-pipelines, kubeflow-centraldashboard, argo-workflows, sqlpad...

CVE-2024-45296 vulnerabilities

Vulnerabilities for packages: thingsboard, kubeflow-pipelines, kubeflow-centraldashboard, argo-workflows, sqlpad...

CVE-2024-45296 vulnerabilities

Vulnerabilities for packages: opensearch-dashboards-fips, opensearch-dashboards, kubeflow-pipelines, kubeflow-centraldashboard, arangodb, thingsboard, sqlpad, argo-workflows...

GHSA-WM9W-RJJ3-J356 vulnerabilities

Vulnerabilities for packages: thingsboard...

CVE-2024-34750 vulnerabilities

Vulnerabilities for packages: thingsboard...

CVE-2024-3270

A vulnerability classified as problematic was found in ThingsBoard up to 3.6.2. This vulnerability affects unknown code of the component AdvancedFeature. The manipulation leads to improper access controls. The attack can be initiated remotely. The exploit has been disclosed to the public and may ...

CVE-2024-3270 ThingsBoard AdvancedFeature access control

A vulnerability classified as problematic was found in ThingsBoard up to 3.6.2. This vulnerability affects unknown code of the component AdvancedFeature. The manipulation leads to improper access controls. The attack can be initiated remotely. The exploit has been disclosed to the public and may ...