Vulnerability Details : CVE-2020-27687
ThingsBoard before v3.2 is vulnerable to Host header injection in password-reset emails. This allows an attacker to send malicious links in password-reset emails to victims, pointing to an attacker-controlled server. Lack of validation of the Host header allows this to happen.
Vulnerability category: Input validation
Products affected by CVE-2020-27687
- cpe:2.3:a:thingsboard:thingsboard:*:*:*:*:*:*:*:*
Exploit prediction scoring system (EPSS) score for CVE-2020-27687
0.27%
Probability of exploitation activity in the next 30 days
EPSS Score History
~ 68 %
Percentile, the proportion of vulnerabilities that are scored at or less
CVSS scores for CVE-2020-27687
Base Score | Base Severity | CVSS Vector | Exploitability Score | Impact Score | Score Source | First Seen |
---|---|---|---|---|---|---|
6.8
|
MEDIUM | AV:N/AC:M/Au:N/C:P/I:P/A:P |
8.6
|
6.4
|
NIST | |
8.8
|
HIGH | CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H |
2.8
|
5.9
|
NIST |
CWE ids for CVE-2020-27687
-
The product receives input or data, but it does not validate or incorrectly validates that the input has the properties that are required to process the data safely and correctly.Assigned by: nvd@nist.gov (Primary)
-
The product constructs all or part of a command, data structure, or record using externally-influenced input from an upstream component, but it does not neutralize or incorrectly neutralizes special elements that could modify how it is parsed or interpreted when it is sent to a downstream component.Assigned by: nvd@nist.gov (Primary)
References for CVE-2020-27687
-
https://github.com/thingsboard/thingsboard/commits/master
Commits · thingsboard/thingsboard · GitHubThird Party Advisory
-
https://gist.github.com/vin01/26a8bb13233acd9425e7575a7ad4c936
CVE-2020-27687: Host header injection in Thingsboard prior to version 3.2 · GitHubExploit;Third Party Advisory
Jump to