585 matches found
CVE-2021-42750
A cross-site scripting XSS vulnerability in Rule Engine in ThingsBoard 3.3.1 allows remote attackers with administrative access to inject arbitrary JavaScript within the title of a rule node...
CVE-2021-42750
A cross-site scripting XSS vulnerability in Rule Engine in ThingsBoard 3.3.1 allows remote attackers with administrative access to inject arbitrary JavaScript within the title of a rule node...
CVE-2021-42751
A cross-site scripting XSS vulnerability in Rule Engine in ThingsBoard 3.3.1 allows remote attackers with administrative access to inject arbitrary JavaScript within the description of a rule node...
CVE-2021-42750
A cross-site scripting XSS vulnerability in Rule Engine in ThingsBoard 3.3.1 allows remote attackers with administrative access to inject arbitrary JavaScript within the title of a rule node...
CVE-2021-42751
A cross-site scripting XSS vulnerability in Rule Engine in ThingsBoard 3.3.1 allows remote attackers with administrative access to inject arbitrary JavaScript within the description of a rule node...
Cross site scripting
A cross-site scripting XSS vulnerability in Rule Engine in ThingsBoard 3.3.1 allows remote attackers with administrative access to inject arbitrary JavaScript within the description of a rule node...
Cross site scripting
A cross-site scripting XSS vulnerability in Rule Engine in ThingsBoard 3.3.1 allows remote attackers with administrative access to inject arbitrary JavaScript within the title of a rule node...
CVE-2021-42751
A cross-site scripting XSS vulnerability in Rule Engine in ThingsBoard 3.3.1 allows remote attackers with administrative access to inject arbitrary JavaScript within the description of a rule node...
CVE-2021-42751
CVE-2021-42751 describes a cross-site scripting (XSS) flaw in ThingsBoard 3.3.1, where an attacker with administrative access can inject arbitrary JavaScript into the description of a rule node. The payload can execute in the editor when hovering over the node, as demonstrated by PoCs in Exploit-...
CVE-2021-42751
A cross-site scripting XSS vulnerability in Rule Engine in ThingsBoard 3.3.1 allows remote attackers with administrative access to inject arbitrary JavaScript within the description of a rule node...
CVE-2021-42750
A cross-site scripting XSS vulnerability in Rule Engine in ThingsBoard 3.3.1 allows remote attackers with administrative access to inject arbitrary JavaScript within the title of a rule node...
CVE-2021-42750
CVE-2021-42750 is a stored XSS vulnerability in the ThingsBoard 3.3.1 Rule Engine that allows remote attackers with administrative access to inject JavaScript into the title of a rule node, which is executed in the editor when hovered. Multiple sources confirm the issue in ThingsBoard 3.3.1 and d...
CVE-2021-42750
A cross-site scripting XSS vulnerability in Rule Engine in ThingsBoard 3.3.1 allows remote attackers with administrative access to inject arbitrary JavaScript within the title of a rule node...
PT-2022-11677
Name of the Vulnerable Software and Affected Versions ThingsBoard version 3.3.1 Description A cross-site scripting XSS issue in the Rule Engine of ThingsBoard allows remote attackers with administrative access to inject arbitrary JavaScript within the title of a rule node. Recommendations For...
CVE-2021-42751: Improper Neutralization of Input During Web Page Generation
A cross-site scripting XSS vulnerability in Rule Engine in ThingsBoard 3.3.1 allows remote attackers with administrative access to inject arbitrary JavaScript within the description of a rule node...
CVE-2021-42750: Improper Neutralization of Input During Web Page Generation
A cross-site scripting XSS vulnerability in Rule Engine in ThingsBoard 3.3.1 allows remote attackers with administrative access to inject arbitrary JavaScript within the title of a rule node...
PT-2022-11678
Name of the Vulnerable Software and Affected Versions ThingsBoard version 3.3.1 Description A cross-site scripting XSS issue in the Rule Engine of ThingsBoard allows remote attackers with administrative access to inject arbitrary JavaScript within the description of a rule node. Recommendations F...
ThingsBoard 3.3.1 'description' - Stored Cross-Site Scripting (XSS)
Exploit Title: ThingsBoard 3.3.1 'description' - Stored Cross-Site Scripting XSS Date: 03/08/2022 Exploit Author: Steffen Langenfeld & Sebastian Biehler Vendor Homepage: https://thingsboard.io/ Software Link: https://github.com/thingsboard/thingsboard/releases/tag/v3.3.1 Version: 3.3.1 Tested on:...
ThingsBoard 3.3.1 'name' - Stored Cross-Site Scripting (XSS)
Exploit Title: ThingsBoard 3.3.1 'name' - Stored Cross-Site Scripting XSS Date: 03/08/2022 Exploit Author: Steffen Langenfeld & Sebastian Biehler Vendor Homepage: https://thingsboard.io/ Software Link: https://github.com/thingsboard/thingsboard/releases/tag/v3.3.1 Version: 3.3.1 CVE :...
Thingsboard 跨站脚本漏洞
Thingsboard is a Java-based platform for IOT devices for monitoring, management, and data collection from the Thingsboard team. A security vulnerability exists in Thingsboard version 3.3.1, which can be exploited by an attacker to put a script payload into the name of a rule node when creating th...