Lucene search

K
cnvdChina National Vulnerability DatabaseCNVD-2022-68520
HistoryMay 20, 2022 - 12:00 a.m.

ToolJet Code Injection Vulnerability

2022-05-2000:00:00
China National Vulnerability Database
www.cnvd.org.cn
10

0.001 Low

EPSS

Percentile

21.6%

A code injection vulnerability exists in ToolJet v0.6.0 through v1.10.2, which stems from a lack of data validation filtering of user-supplied data and output in the first and last name fields of the invitation email. An attacker could exploit this vulnerability to inject malicious code when inviting new users.

CPENameOperatorVersion
ToolJet ToolJet >=v0.6.0,<=veq1.10.2

0.001 Low

EPSS

Percentile

21.6%

Related for CNVD-2022-68520