CyberRota Analysis
AI-GeneratedThe vulnerability affects the rust-iot-platform, specifically through the unsecured API endpoint that allows unauthenticated users to create "calc rules" containing arbitrary JavaScript code. This flaw enables attackers to execute malicious scripts on the server, leading to potential data breaches or system compromise. Organizations using this platform should prioritize patching this vulnerability to mitigate the risk of unauthorized access and execution of harmful code.
Public Exploit Signal
A public exploit, PoC, GitHub repository or Metasploit reference was detected for this CVE.
Note: these links are listed for security research and verification purposes only.
Original NVD Description
rust-iot-platform allows creating a "calc rule" via POST /calc-rule/create (api/src/controller/calc_rule_router.rs) containing an arbitrary field. This route does not take the AuthToken request guard used elsewhere in the application, making it reachable without authentication.