VULNERABILITY INTELLIGENCE

CVE-2024-55466

CVSS score6.5 MEDIUM

EPSS probability0.39%

CISA KEVNot currently listed

Published2025-05-12

Last modified2026-06-17

Description

An arbitrary file upload vulnerability in the Image Gallery of ThingsBoard Community, ThingsBoard Cloud and ThingsBoard Professional v3.8.1 allows attackers to execute arbitrary code via uploading a crafted file.