ThingsBoard < 3.8.1 - Arbitrary File Upload and Remote Code Execution via Image Gallery
An arbitrary file upload vulnerability in the Image Gallery of ThingsBoard Community, ThingsBoard Cloud and ThingsBoard Professional v3.8.1 allows attackers to execute arbitrary code via uploading a crafted file.