CVE-2022-40004
Cross Site Scripting (XSS) vulnerability in Things Board 3.4.1 allows remote attackers to escalate privilege via crafted URL to the Audit Log.
原文の説明
取得元が公開している説明をそのまま載せています (多くは英語)。
Cross Site Scripting (XSS) vulnerability in Things Board 3.4.1 allows remote attackers to escalate privilege via crafted URL to the Audit Log.
参照URL
- advisory github.com
- advisory nvd.nist.gov
- web gist.github.com