Vulnerabilities

TI-2022-15856 CVE-2022-35136 · GHSA-4r3g-w96h-5qxg

Boodskap IoT Platform v4.4.9-02 allows attackers to make unauthenticated API requests.

MEDIUM 62

Boodskap IoT Platform v4.4.9-02 allows attackers to make unauthenticated API requests.

CVSS 3.1MEDIUM 6.5 Network Low privileges No interaction EPSS 0.00728 Published 2022-10-13 No fix listed CWE-306

TI-2022-15855 CVE-2022-35135 · GHSA-6p9p-79qr-h76c

HIGH 73

Boodskap IoT Platform v4.4.9-02 allows attackers to escalate privileges via a crafted request sent to /api/user/upsert/<uuid>.

CVSS 3.1HIGH 8.8 Network Low privileges No interaction EPSS 0.00954 Published 2022-10-13 No fix listed CWE-287

TI-2022-15854 CVE-2022-35134 · GHSA-f8pv-g5wp-pv5c

MEDIUM 58

Boodskap IoT Platform v4.4.9-02 contains a cross-site scripting (XSS) vulnerability.

CVSS 3.1MEDIUM 5.4 Network Low privileges User interaction EPSS 0.00545 Published 2022-10-13 No fix listed CWE-79