CVE-2022-40004

CRITICAL CVSS: 9.6 Published: 2022-12-15 Modified: 2026-06-17

Description

Cross Site Scripting (XSS) vulnerability in Things Board 3.4.1 allows remote attackers to escalate privilege via crafted URL to the Audit Log.

Affected Platforms

Thingsboard Thingsboard

Weakness Type

CWE-79, CWE-79

References