CVE Search Engine - Security Vulnerabilities and Exploits Search Tool

show all

5 matches found

NVD•added 2025/05/12 7:15 p.m.•17 views

CVE-2024-55466

An arbitrary file upload vulnerability in the Image Gallery of ThingsBoard Community, ThingsBoard Cloud and ThingsBoard Professional v3.8.1 allows attackers to execute arbitrary code via uploading a crafted file...

6.5CVSS0.00437EPSS

Exploits1References2

OSV•added 2025/05/12 7:15 p.m.•4 views

CVE-2024-55466

6.5CVSS8AI score0.00437EPSS

Exploits1References2

Vulnrichment•added 2025/05/12 12:0 a.m.•8 views

CVE-2024-55466

8AI score0.00437EPSS

Exploits1References2

CVE•added 2025/05/12 12:0 a.m.•49 views

CVE-2024-55466

CVE-2024-55466 affects ThingsBoard products (Community/Cloud/Professional) up to v3.8.1, where an arbitrary file upload in the Image Gallery can lead to arbitrary code execution. The root cause is an insecure file upload path in the Image Gallery component. In publicly available sources, guidance...

6.5CVSS7.4AI score0.00437EPSS

Exploits1References2Affected Software1