Логотип exploitDog
Консоль
Логотип exploitDog

exploitDog

github логотип

GHSA-2qg3-px2c-m64g

Опубликовано: 12 мая 2025
Источник: github
Github: Не прошло ревью
CVSS3: 6.5

Описание

An arbitrary file upload vulnerability in the Image Gallery of ThingsBoard Community, ThingsBoard Cloud and ThingsBoard Professional v3.8.1 allows attackers to execute arbitrary code via uploading a crafted file.

An arbitrary file upload vulnerability in the Image Gallery of ThingsBoard Community, ThingsBoard Cloud and ThingsBoard Professional v3.8.1 allows attackers to execute arbitrary code via uploading a crafted file.

EPSS

Процентиль: 35%
0.00142
Низкий

6.5 Medium

CVSS3

Дефекты

CWE-77

Связанные уязвимости

CVSS3: 6.5
nvd
9 месяцев назад

An arbitrary file upload vulnerability in the Image Gallery of ThingsBoard Community, ThingsBoard Cloud and ThingsBoard Professional v3.8.1 allows attackers to execute arbitrary code via uploading a crafted file.

EPSS

Процентиль: 35%
0.00142
Низкий

6.5 Medium

CVSS3

Дефекты

CWE-77