Skip to content
OpenAdvisories

Package · Maven

org.thingsboard:application

2 known vulnerabilities.

All Critical High Medium Low Exploited only Public exploit

1 result · Clear filters · Feed

  • Medium 6.2
    CVE-2025-34281

    Stored Cross-Site Scripting (XSS) in ThingsBoard

    ThingsBoard in versions prior to v4.2.1 allows an authenticated user to upload malicious SVG images via the "Image Gallery", leading to a Stored Cross-Site Scripting (XSS) vulnerability. The exploit can be triggered when any user accesses the public API endpo…

    ThingsBoard ThingsBoard org.thingsboard:application Maven