High severity8.8NVD Advisory· Published Feb 23, 2023· Updated Jun 17, 2026
CVE-2022-48341
CVE-2022-48341
Description
ThingsBoard 3.4.1 could allow a remote authenticated attacker to achieve Vertical Privilege Escalation. A Tenant Administrator can obtain System Administrator dashboard access by modifying the scope via the scopes parameter.
AI Insight
LLM-synthesized narrative grounded in this CVE's description and references.
Affected products
3cpe:2.3:a:thingsboard:thingsboard:3.4.1:*:*:*:*:*:*:*+ 2 more
- cpe:2.3:a:thingsboard:thingsboard:3.4.1:*:*:*:*:*:*:*
- (no CPE)
- (no CPE)range: <3.4.1
Patches
Vulnerability mechanics
References
2- exchange.xforce.ibmcloud.com/vulnerabilities/238543nvdThird Party AdvisoryVDB Entry
- thingsboard.io/docs/reference/releases/nvdRelease Notes
News mentions
0No linked articles in our index yet.