Lucene search
+L

2 matches found

NVD
NVD
•added 2022/05/18 2:15 p.m.•27 views

CVE-2022-23068

ToolJet versions v0.6.0 to v1.10.2 are vulnerable to HTML injection where an attacker can inject malicious code inside the first name and last name field while inviting a new user which will be reflected in the invitational e-mail...

5.4CVSS0.00606EPSS
SaveExploits1References2
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2022/05/18 12:00 a.m.•3 views

CVE-2022-23068: Improper Neutralization of Special Elements in Output Used by a Downstream Component

ToolJet versions v0.6.0 to v1.10.2 are vulnerable to HTML injection where an attacker can inject malicious code inside the first name and last name field while inviting a new user which will be reflected in the invitational e-mail...

5.4CVSS5.9AI score0.00606EPSS
SaveExploits1References3
Rows per page
Query Builder