ThingsBoard before 3.5 allows Server-Side Template Injection if users are allowed to modify an email template, because Apache FreeMarker supports freemarker.template.utility.Execute (for content sent to the /api/admin/settings endpoint).
| Package (Ecosystem) | Introduced | Fixed | Limit |
|---|---|---|---|
| org.thingsboard:thingsboard(Maven) | 0 | 3.5 | N/A |
CVSS Metrics
