TI-2022-03094 Aliases CVE-2022-3348 GHSA-xr6p-m6mj-h42c

Exposure of Sensitive Information to an Unauthorized Actor in tooljet/tooljet

LOW 27CWE-200Published 2022-09-28 · Updated 2025-05-21

Key facts

Attack vector: Network
Privileges required: High
User interaction: None
Attack complexity: Low
Impact type: Information disclosure
Confidentiality · integrity · availability: High · None · None
Fix status: Fixed

Attack profile from CVSS 3.1 · NVD. Fix status from CNA. Impact type from CWE-200.

Summary

Just like in the previous report, an attacker could steal the account of different users. But in this case, it's a little bit more specific, because it is needed to be an editor in the same app as the victim.

Why it matters now

Exploitation None reported CISA SSVC · not in CISA KEV

EPSS 0.0107 65th percentileScored 2026-11-07

Public exploit Yes 1 exploit referenceTagged by NVD

Fix Fixed tooljet/tooljet (tooljet): v1.26.0

SSVC decision points

CISA ADP · SSVC 2.0.3

Exploitation: None
Automatable: No
Technical impact: Total

The decision (Track, Attend, Act) also depends on your mission and well-being impact; see CISA's SSVC guide.

Affected products

Vendor	Product	Affected versions	Fixed in	Status	Source
ToolJet	tooljet/tooljet	before v1.26.0	v1.26.0	Patch available	CNA

tooljet/tooljet VendorToolJet Affected before v1.26.0 Fixed in v1.26.0 Patch available CNA

CPE configurations NVD · 1

CPE	Versions	Role	Vendor
cpe:2.3:a:tooljet:tooljet::::::::	before 2022-09-11	Vulnerable	ToolJet

cpe:2.3:a:tooljet:tooljet:*:*:*:*:*:*:*:* Versions before 2022-09-11 Vulnerable ·ToolJet

Remediation

Fix · CNA tooljet/tooljet (tooljet) Fixed in v1.26.0

Timeline

2026-10-02 Threatist record created from CVE-2022-3348
2026-10-03 Alias added: GHSA-xr6p-m6mj-h42c

References

Exploit 1

https://huntr.dev/bounties/aae4aeb8-2612-4254-85e5-90675b082eac

Patch 1

https://github.com/tooljet/tooljet/commit/37bf6de75f161e03c2a81888810488b913863a46

TI-2022-10831 Tooljet v1.6 does not properly handle missing values in the API, allowing attackers to… CVSS 3.1HIGH 7.5
TI-2026-39238 ToolJet GitHub Actions comment body shell injection exposes deployment secrets CVSS 3.1HIGH 8.8
TI-2022-03759 Improper Validation of Specified Quantity in Input in tooljet/tooljet CVSS 3.1MEDIUM 6.5
TI-2022-10832 A cross-site scripting (XSS) vulnerability in ToolJet v1.6.0 allows attackers to execute… CVSS 3.1MEDIUM 5.4
TI-2022-07240 ToolJet - Token Leakage via Referer Header CVSS 3.1HIGH 8.8
TI-2022-02784 Improper Access Control in tooljet/tooljet CVSS 3.1HIGH 8.8

See all 10 →

Sources

This product uses the NVD API but is not endorsed or certified by the NVD. Sources and licences