critical9.6
CVE-2022-40004
Cross Site Scripting (XSS) vulnerability in Things Board 3.4.1 allows remote attackers to escalate privilege via crafted URL to the Audit Log.
Impact
Cross Site Scripting (XSS) vulnerability in Things Board 3.4.1 allows remote attackers to escalate privilege via crafted URL to the Audit Log.
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Thingsboard | Thingsboard | Version 3.4.1 |