5.3
Moyenne
CVE-2025-9094 A vulnerability was detected in ThingsBoard 4.1
Description
A vulnerability was detected in ThingsBoard 4.1. This vulnerability affects unknown code of the component Add Gateway Handler. The manipulation leads to improper neutralization of special elements used in a template engine. The attack can be initiated remotely. The exploit has been disclosed to the public and may be used. The vendor replies, that "[t]he fix will come within upcoming release (v4.2) and will be inherited by maintenance releases of LTS versions (starting 4.0)."
Produits et versions touchés
| Produit | Versions touchées | Corrigé en |
|---|---|---|
| ThingsBoard | 4.1 | Pas de correctif indiqué |
Autres CVE de ThingsBoard
Les 4 CVE de ThingsBoard →
CVE-2026-9568
A weakness has been identified in ThingsBoard up to 4.3.1.1
2.3
Faible
CVE-2024-9358
A vulnerability has been found in ThingsBoard up to 3.7.0 and classified as problematic
6.0
Moyenne
CVE-2024-3270
A vulnerability classified as problematic was found in ThingsBoard up to 3.6.2
3.8
Faible