Threats affecting pkg:github/thingsboard/thingsboard

A code injection vulnerability exists in ThingsBoard versions up to 4.3.1.1 in the getGatewayDockerComposeFile function within the YAML Handler component. This vulnerability can be triggered remotely but requires high attack complexity and user interaction. The vulnerability has a low severity rating and no known exploits in the wild. The vendor has not yet issued a patch or official remediation.

ThingsBoard versions < 4.2.1 contain a server-side request forgery (SSRF) vulnerability in the dashboard's Image Upload Gallery feature. An attacker can upload a malicious SVG file that references a remote URL. If the server processes the SVG file in a way that parses external references, it may initiate unintended outbound requests. This can be used to access internal services or resources.

ThingsBoard versions < 4.2.1 contain a stored cross-site scripting (XSS) vulnerability in the dashboard's Image Upload Gallery feature. An attacker can upload an SVG file containing malicious JavaScript, which may be executed when the file is rendered in the UI. This issue results from insufficient sanitization and improper content-type validation of uploaded SVG files.