Sploitus

CVE-2021-42750

3 known exploits for CVE-2021-42750

A cross-site scripting (XSS) vulnerability in Rule Engine in ThingsBoard 3.3.1 allows remote attackers (with administrative access) to inject arbitrary JavaScript within the title of a rule node.

Affected products
Thingsboard
Thingsboard
= 3.3.1
Fix
Available
CVSS 3.1
4.8 MEDIUM
EPSS
2.5% (83th percentile)
Weakness
CWE-79
NVD status
Modified
Published
2022-08-12
CVE-2021-42750 at NVD
Authoritative description, scoring and affected products

3 known exploits for CVE-2021-42750

Proof-of-concept code and exploit modules indexed by Sploitus

ThingsBoard 3.3.1 'name' - Stored Cross-Site Scripting (XSS)
2022-08-09 Steffen LangenfeldEXPLOITDB
ThingsBoard 3.3.1 - Stored Cross-Site Scripting Vulnerability
2022-08-08 Steffen LangenfeldZDT
Thingsboard 3.3.1 Cross Site Scripting
2022-08-08 Steffen Langenfeld, Sebastian BiehlerPACKETSTORM