ToolJet 访问控制错误漏洞

ToolJet is an extensible low-code framework for building business applications from ToolJet. ToolJet suffers from an Access Control Error vulnerability that stems from allowing an attacker via a forgotten password token to be able to take over the account of any comment that can be seen in the...

PT-2022-4501 · Tooljet · Tooljet

Name of the Vulnerable Software and Affected Versions: ToolJet affected versions not specified Description: The issue is related to insufficient access control in the getComment function of the ToolJet platform, which can be exploited by a remote attacker to elevate their privileges. This...

CVE-2022-2631

Improper Access Control in GitHub repository tooljet/tooljet prior to v1.19.0...

CVE-2022-2631

Improper Access Control in GitHub repository tooljet/tooljet prior to v1.19.0...

Improper access control

Improper Access Control in GitHub repository tooljet/tooljet prior to v1.19.0...

CVE-2022-2631

ToolJet (tooljet/tooljet) prior to v1.19.0 is affected by CVE-2022-2631 (Improper Access Control). Root cause: insufficient access checks in the ToolJet repository, enabling improper access control. Affected severity metrics indicate high impact to confidentiality, integrity, and availability (CV...

CVE-2022-2631 Improper Access Control in tooljet/tooljet

Improper Access Control in GitHub repository tooljet/tooljet prior to v1.19.0...

CVE-2022-2631 Improper Access Control in tooljet/tooljet

Improper Access Control in GitHub repository tooljet/tooljet prior to v1.19.0...

ToolJet 访问控制错误漏洞

ToolJet is an extensible low-code framework for building business applications from ToolJet. An Access Control Error vulnerability exists in ToolJet versions prior to 1.19.0 that stems from incorrect access control...

PT-2022-17778 · Tooljet · Tooljet

Name of the Vulnerable Software and Affected Versions: tooljet/tooljet versions prior to v1.19.0 Description: The issue is related to improper access control. Recommendations: For versions prior to v1.19.0, update to version v1.19.0 or later to resolve the issue...

CVE-2022-2037

Excessive Attack Surface in GitHub repository tooljet/tooljet prior to v1.16.0...

CVE-2022-2037

Excessive Attack Surface in GitHub repository tooljet/tooljet prior to v1.16.0...

Design/Logic Flaw

Excessive Attack Surface in GitHub repository tooljet/tooljet prior to v1.16.0...

CVE-2022-2037

CVE-2022-2037 affects ToolJet (tooljet/tooljet) before v1.16.0. The vulnerability is described as an Excessive Attack Surface. Severity varies by source (NVD CVSS2/3.1 reports base scores up to 8.0/9.8 in CNA data). A fix exists in v1.16.0 and later; upgrade to 1.16.0+ to mitigate. Technical deta...

CVE-2022-2037 Excessive Attack Surface in tooljet/tooljet

Excessive Attack Surface in GitHub repository tooljet/tooljet prior to v1.16.0...

CVE-2022-2037 Excessive Attack Surface in tooljet/tooljet

Excessive Attack Surface in GitHub repository tooljet/tooljet prior to v1.16.0...

ToolJet 安全漏洞

ToolJet is an extensible low-code framework for building business applications from ToolJet. A security vulnerability exists in ToolJet versions prior to v1.16.0...

ToolJet Code Injection Vulnerability

A code injection vulnerability exists in ToolJet v0.6.0 through v1.10.2, which stems from a lack of data validation filtering of user-supplied data and output in the first and last name fields of the invitation email. An attacker could exploit this vulnerability to inject malicious code when...

ToolJet Information Disclosure Vulnerability

ToolJet is an extensible, low-code framework for building business applications from ToolJet. v0.5.0 to v1.2.2 of ToolJet is vulnerable to an information disclosure vulnerability that stems from a token leak in the application. An attacker could exploit the vulnerability to access a user's accoun...

CVE-2022-23068

ToolJet versions v0.6.0 to v1.10.2 are vulnerable to HTML injection where an attacker can inject malicious code inside the first name and last name field while inviting a new user which will be reflected in the invitational e-mail...