cbcvebase.

Thingsboard Inc Thingsboard vulnerabilities

1 known vulnerability affecting thingsboard_inc/thingsboard.

Total CVEs
1
CISA KEV
0
Public exploits
1
Exploited in wild
0
Severity breakdown
CRITICAL1

Vulnerabilities

Page 1 of 1
CVE-2025-34282P2CRITICALCVSS 9.1PoCfixed in 4.2.12025-10-17
CVE-2025-34282 [CRITICAL] CWE-918 CVE-2025-34282: ThingsBoard versions < 4.2.1 contain a server-side request forgery (SSRF) vulnerability in the dashb ThingsBoard versions < 4.2.1 contain a server-side request forgery (SSRF) vulnerability in the dashboard's Image Upload Gallery feature. An attacker can upload a malicious SVG file that references a remote URL. If the server processes the SVG file in a way that parses external references, it may initiate unintended outbound requests. This can be u
nvd