CVE-2024-9358

A vulnerability has been found in ThingsBoard up to 3.7.0 and classified as problematic. Affected by this vulnerability is an unknown functionality of the component HTTP RPC API. The manipulation leads to resource consumption. The attack can be launched remotely. The complexity of an attack is rather high. The exploitation appears to be difficult. The exploit has been disclosed to the public and may be used. Upgrading to version 3.7.1 is able to address this issue. It is recommended to upgrade the affected component. The vendor was informed on 2024-07-24 about this vulnerability and announced the release of 3.7.1 for the second half of September 2024.

• CWE-400

• https://1drv.ms/v/s!AksJ421iyCG-mytAcEUF6WqOTwj2?e=6WAp5GExploit
• https://vuldb.com/?ctiid.278887Permissions Required, VDB Entry
• https://vuldb.com/?id.278887Third Party Advisory, VDB Entry
• https://vuldb.com/?submit.379486Exploit, Third Party Advisory, VDB Entry

Published

Oct 1, 2024

Last Modified

Jun 17, 2026

Status

Analyzed

• How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
• Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
• PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
• AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.

• CVE-2024-9352The Forminator Forms – Contact Form, Payment Form & Custom F…4.3
• CVE-2024-9353The Popularis Extra plugin for WordPress is vulnerable to Re…6.1
• CVE-2024-9354The Estatik Mortgage Calculator plugin for WordPress is vuln…6.1
• CVE-2024-9355A vulnerability was found in Golang FIPS OpenSSL. This flaw …6.5
• CVE-2024-9356The Yotpo: Product & Photo Reviews for WooCommerce plugin fo…6.1
• CVE-2024-9357The xili-tidy-tags plugin for WordPress is vulnerable to Ref…6.1
• CVE-2024-9359A vulnerability was found in code-projects Restaurant Reserv…9.8
• CVE-2024-9360A vulnerability was found in code-projects Restaurant Reserv…9.8
• CVE-2024-9361The Bulk images optimizer: Resize, optimize, convert to webp…4.3
• CVE-2024-9362An unauthenticated directory traversal vulnerability exists …7.5
• CVE-2024-9363An unauthorized file deletion vulnerability exists in the la…7.5
• CVE-2024-9364The SendGrid for WordPress plugin for WordPress is vulnerabl…4.3