Lucene search
China National Vulnerability DatabaseCNVD-2022-68521HistoryMay 20, 2022 - 12:00 a.m.
ToolJet Information Disclosure Vulnerability
2022-05-2000:00:00
China National Vulnerability Database
www.cnvd.org.cn
9
0.002 Low
EPSS
Percentile
58.6%
ToolJet is an extensible, low-code framework for building business applications from ToolJet. v0.5.0 to v1.2.2 of ToolJet is vulnerable to an information disclosure vulnerability that stems from a token leak in the application. An attacker could exploit the vulnerability to access a user’s account via Referer.
| CPE | Name | Operator | Version |
|---|---|---|---|
| ToolJet ToolJet >=v0.5.0，<=v | eq | 1.2.2 |
Related
nvd
nvd
CVE-2022-23067
2022-05-18 14:15:08
osv
osv
CVE-2022-23067
2022-05-18 14:15:08
cve
cve
CVE-2022-23067
2022-05-18 14:15:08
prion
prion
Design/Logic Flaw
2022-05-18 14:15:00
cvelist
cvelist
CVE-2022-23067 ToolJet - Token Leakage via Referer Header
2022-05-17 00:00:00