CVE-2020-27687

ThingsBoard before v3.2 is vulnerable to Host header injection in password-reset emails. The root cause is lack of validation of the Host header, enabling an attacker to embed a malicious link in a password-reset email that points to an attacker-controlled server. Impact per sources is high confi...

CVE-2020-27687

ThingsBoard before v3.2 is vulnerable to Host header injection in password-reset emails. This allows an attacker to send malicious links in password-reset emails to victims, pointing to an attacker-controlled server. Lack of validation of the Host header allows this to happen...

PT-2020-16763

Name of the Vulnerable Software and Affected Versions ThingsBoard versions prior to 3.2 Description The issue allows an attacker to send malicious links in password-reset emails to victims, pointing to an attacker-controlled server due to lack of validation of the Host header. This enables host...

Thingsboard 注入漏洞

Thingsboard is a Java-based platform for monitoring, management, and data collection of IOT devices from the Thingsboard team. A security vulnerability exists in versions prior to ThingsBoard v3.2 that stems from the injection of host headers in password reset emails. This allowed an attacker to...

CVE-2020-27687: Improper Input Validation

ThingsBoard before v3.2 is vulnerable to Host header injection in password-reset emails. This allows an attacker to send malicious links in password-reset emails to victims, pointing to an attacker-controlled server. Lack of validation of the Host header allows this to happen...