Skip to content
OpenAdvisories

Archive

17 October 2025

Vulnerabilities first published on this day (UTC), newest first.

1 result · Clear filters · Feed

  • Medium 6.9
    CVE-2025-34282 Public exploit

    ThingsBoard < v4.2.1 SVG Image SSRF

    ThingsBoard versions < 4.2.1 contain a server-side request forgery (SSRF) vulnerability in the dashboard's Image Upload Gallery feature. An attacker can upload a malicious SVG file that references a remote URL. If the server processes the SVG file in a way th…