CVE-2021-42750

Published August 12th, 2022

View on NVD ↗

CVSS v3

4.8

MEDIUM

CVSS v2

N/A

Affected

PROJECT

Description

A cross-site scripting (XSS) vulnerability in Rule Engine in ThingsBoard 3.3.1 allows remote attackers (with administrative access) to inject arbitrary JavaScript within the title of a rule node.

thingsboard/thingsboard

Open-source IoT Platform - Device management, data collection, processing and visualization.

GitHub

21.9K