Vulnerability Information
Although we use advanced large model technology, its output may still contain inaccurate or outdated information.Shenlong tries to ensure data accuracy, but please verify and judge based on the actual situation.
Vulnerability Title
N/A
Vulnerability Description
A cross-site scripting (XSS) vulnerability in Rule Engine in ThingsBoard 3.3.1 allows remote attackers (with administrative access) to inject arbitrary JavaScript within the description of a rule node.
CVSS Information
N/A
Vulnerability Type
N/A
Vulnerability Title
Thingsboard 跨站脚本漏洞
Vulnerability Description
Thingsboard是Thingsboard团队的一个基于Java用于IOT设备进行监控、管理、数据收集的平台。 Thingsboard 3.3.1版本存在安全漏洞，攻击者利用该漏洞可以在创建规则节点时将脚本有效负载放入规则节点的名称，它会在编辑器中执行。
CVSS Information
N/A
Vulnerability Type
N/A