An arbitrary file upload vulnerability in the Image Gallery of ThingsBoard Community, ThingsBoard Cloud and ThingsBoard Professional v3.8.1 allows attackers to execute arbitrary code via uploading a crafted file.
Metrics
Affected Vendors & Products
References
History
Wed, 09 Jul 2025 02:00:00 +0000
Type | Values Removed | Values Added |
---|---|---|
First Time appeared |
Thingsboard
Thingsboard thingsboard |
|
CPEs | cpe:2.3:a:thingsboard:thingsboard:*:*:*:*:*:*:*:* | |
Vendors & Products |
Thingsboard
Thingsboard thingsboard |
Tue, 13 May 2025 16:15:00 +0000
Type | Values Removed | Values Added |
---|---|---|
Weaknesses | CWE-77 | |
Metrics |
cvssV3_1
|
Mon, 12 May 2025 19:00:00 +0000
Type | Values Removed | Values Added |
---|---|---|
Description | An arbitrary file upload vulnerability in the Image Gallery of ThingsBoard Community, ThingsBoard Cloud and ThingsBoard Professional v3.8.1 allows attackers to execute arbitrary code via uploading a crafted file. | |
References |
|

Status: PUBLISHED
Assigner: mitre
Published:
Updated: 2025-05-13T15:56:01.549Z
Reserved: 2024-12-06T00:00:00.000Z
Link: CVE-2024-55466

Updated: 2025-05-13T15:55:57.397Z

Status : Analyzed
Published: 2025-05-12T19:15:48.417
Modified: 2025-07-09T01:38:44.403
Link: CVE-2024-55466

No data.