Skip to content
OpenAdvisories

Package · Maven

org.thingsboard:thingsboard

1 known vulnerabilities.

All Critical High Medium Low Exploited only Public exploit

1 result · Feed

  • High 8.4
    CVE-2023-45303

    ThingsBoard Server-Side Template Injection

    ThingsBoard before 3.5 allows Server-Side Template Injection if users are allowed to modify an email template, because Apache FreeMarker supports freemarker.template.utility.Execute (for content sent to the /api/admin/settings endpoint).

    org.thingsboard:thingsboard Maven