Advisories · Technology
ThingsBoard.
Every CVE that names ThingsBoard among its affected products, newest first. Vendors and products are as the CNA wrote them; check the affected versions on each record.
- CVSS 8.6 High
Prototype pollution in ThingsBoard
- ThingsBoard
- Prototype pollution
- CVSS 2.3 Low
ThingsBoard YAML provision getGatewayDockerComposeFile code injection
- ThingsBoard
- Other injection
- Code injection
- CVSS 6.9 Medium
ThingsBoard < v4.2.1 SVG Image SSRF
- ThingsBoard
- Server-side request forgery (SSRF)
- CVSS 5.3 Medium
ThingsBoard Add Gateway special elements used in a template engine
- ThingsBoard
- Code injection
- CWE-791
- CVSS 6.0 Medium
ThingsBoard HTTP RPC API resource consumption
- ThingsBoard
- Denial of service
- CVSS 3.8 Low
ThingsBoard AdvancedFeature access control
- ThingsBoard
- Broken access control