CVE-2022-3422

creationtimestamp| type| source ---|---|--- 2022-10-07 14:17:14+00:00| seen| https://t.me/cibsecurity/50955...

CVE-2022-3422 Improper Privilege Management in tooljet/tooljet

Account Takeover :: when see the info i can see the hash pass i can creaked it ............... Account Takeover :: when see the info i can see the forgotpasswordtoken the hacker can send the request and changed the pass...

CVE-2022-3422

CVE-2022-3422 affects ToolJet/tooljet with an improper privilege management issue enabling account takeover. Public records describe attackers potentially seeing hashed passwords and the forgot_password_token, which could allow password changes to hijack accounts. The CVE is referenced across mul...