← All advisories

Critical severity9.6NVD Advisory· Published Dec 15, 2022· Updated Jun 17, 2026

CVE-2022-40004

CVE-2022-40004

Description

Cross Site Scripting (XSS) vulnerability in Things Board 3.4.1 allows remote attackers to escalate privilege via crafted URL to the Audit Log.

AI Insight

LLM-synthesized narrative grounded in this CVE's description and references.

Affected products

3

Thingsboard/Thingsboard2 versions
cpe:2.3:a:thingsboard:thingsboard:3.4.1:*:*:*:*:*:*:*+ 1 more
- cpe:2.3:a:thingsboard:thingsboard:3.4.1:*:*:*:*:*:*:*
- (no CPE)range: <3.4.1
Things Board/Things Boarddescription

Patches

Vulnerability mechanics

References

1

gist.github.com/s3d113/bba63da007fcbe243615dd2a81690ffbnvdThird Party Advisory

News mentions

0

No linked articles in our index yet.