585 matches found
ThingsBoard 3.3.1 - Stored Cross-Site Scripting Vulnerability
Exploit Title: ThingsBoard 3.3.1 - Stored Cross-Site Scripting XSS within the description of a rule node Exploit Author: Steffen Langenfeld & Sebastian Biehler Vendor Homepage: https://thingsboard.io/ Software Link: https://github.com/thingsboard/thingsboard/releases/tag/v3.3.1 Version: 3.3.1...
Thingsboard 跨站脚本漏洞
Thingsboard is a Java-based platform for IOT devices for monitoring, management, and data collection from the Thingsboard team. A security vulnerability exists in Thingsboard version 3.3.1, which can be exploited by an attacker to put a script payload into the name of a rule node when creating th...
Thingsboard 3.3.1 Cross Site Scripting
Exploit Title: ThingsBoard 3.3.1 - Stored Cross-Site Scripting XSS within the description of a rule node Date: 03/08/2022 Exploit Author: Steffen Langenfeld & Sebastian Biehler Vendor Homepage: https://thingsboard.io/ Software Link: https://github.com/thingsboard/thingsboard/releases/tag/v3.3.1...
GHSA-CQJ8-47CH-RVVQ vulnerabilities
Vulnerabilities for packages: thingsboard...
GHSA-CQJ8-47CH-RVVQ vulnerabilities
Vulnerabilities for packages: thingsboard...
GHSA-2QP4-G3Q3-F92W vulnerabilities
Vulnerabilities for packages: thingsboard...
GHSA-2QP4-G3Q3-F92W vulnerabilities
Vulnerabilities for packages: thingsboard...
CVE-2022-24329 vulnerabilities
Vulnerabilities for packages: thingsboard...
CVE-2022-24329 vulnerabilities
Vulnerabilities for packages: thingsboard...
GHSA-FG2V-W576-W4V3 vulnerabilities
Vulnerabilities for packages: druid, thingsboard, celeborn...
GHSA-FG2V-W576-W4V3 vulnerabilities
Vulnerabilities for packages: druid, thingsboard, hadoop-client-modules, celeborn...
CVE-2021-31684 vulnerabilities
Vulnerabilities for packages: druid, thingsboard, hadoop-client-modules, celeborn...
CVE-2021-31684 vulnerabilities
Vulnerabilities for packages: druid, thingsboard, celeborn...
CVE-2020-29582 vulnerabilities
Vulnerabilities for packages: thingsboard...
CVE-2020-29582 vulnerabilities
Vulnerabilities for packages: thingsboard...
Thingsboard Injection Vulnerability
Thingsboard is a Java-based platform for monitoring, management, and data collection of IOT devices from the Thingsboard team. A security vulnerability exists in versions prior to ThingsBoard v3.2 that stems from the injection of host headers in password reset emails. This allowed an attacker to...
CVE-2020-27687
ThingsBoard before v3.2 is vulnerable to Host header injection in password-reset emails. This allows an attacker to send malicious links in password-reset emails to victims, pointing to an attacker-controlled server. Lack of validation of the Host header allows this to happen...
CVE-2020-27687
ThingsBoard before v3.2 is vulnerable to Host header injection in password-reset emails. This allows an attacker to send malicious links in password-reset emails to victims, pointing to an attacker-controlled server. Lack of validation of the Host header allows this to happen...
Design/Logic Flaw
ThingsBoard before v3.2 is vulnerable to Host header injection in password-reset emails. This allows an attacker to send malicious links in password-reset emails to victims, pointing to an attacker-controlled server. Lack of validation of the Host header allows this to happen...
CVE-2020-27687
ThingsBoard before v3.2 is vulnerable to Host header injection in password-reset emails. This allows an attacker to send malicious links in password-reset emails to victims, pointing to an attacker-controlled server. Lack of validation of the Host header allows this to happen...