PT-2024-29716 · Retool · Retool

Name of the Vulnerable Software and Affected Versions: Retool self-hosted enterprise versions 3.18.1 through 3.40.0 Description: The issue allows an authenticated attacker to discover credentials for users with "Use" permissions via the "/api/resources" endpoint. This is due to the insertion of...