CVE Search Engine - Security Vulnerabilities and Exploits Search Tool

show all

5 matches found

RedhatCVE•added 2025/05/22 10:39 p.m.•21 views

CVE-2022-27978

Tooljet v1.6 does not properly handle missing values in the API, allowing attackers to arbitrarily reset passwords via a crafted HTTP request...

7.5CVSS6.7AI score0.01036EPSS

SaveExploits1References1

Vulnrichment•added 2023/04/26 12:00 a.m.•19 views

CVE-2022-27978

Tooljet v1.6 does not properly handle missing values in the API, allowing attackers to arbitrarily reset passwords via a crafted HTTP request...

7.4AI score0.01036EPSS

SaveExploits1References1

CVE•added 2023/04/26 12:00 a.m.•89 views

CVE-2022-27978

Tooljet (v1.6) is affected by an issue described as improper handling of missing values in the API, which enables an attacker to arbitrarily reset user passwords via a crafted HTTP request. The vulnerability is evidenced in CVE-2022-27978 and mapped to a CVSS v3.1 base score of 7.5 (HIGH) with NE...

7.5CVSS7.7AI score0.01036EPSS

SaveExploits1References1Affected Software1

Cvelist•added 2023/04/26 12:00 a.m.•67 views

CVE-2022-27978

Tooljet v1.6 does not properly handle missing values in the API, allowing attackers to arbitrarily reset passwords via a crafted HTTP request...

7.5AI score0.01036EPSS

SaveExploits1References1

OSV•added 2023/04/26 12:00 a.m.•33 views

CVE-2022-27978

Tooljet v1.6 does not properly handle missing values in the API, allowing attackers to arbitrarily reset passwords via a crafted HTTP request...

7.5CVSS7AI score

SaveExploits0References3

Rows per page

Query Builder

Family

Bulletin Type

Min CVSS Score

Date

Order by