Read the docs

Vulnerabilities

Filters

Reset all
Threatist priority
Signals
Fix status
Impact type
Attack vector
Requirements
Product

Products as named in CPE, with their records.

Published
Weakness (CWE)
1 selected

2 records

Release: ToolJet unspecified Clear all filters
TI-2022-07241 CVE-2022-23068 · GHSA-2wqm-v6p6-8mqx

ToolJet - HTML Injection in Invite New User

Priority LOW 25

ToolJet versions v0.6.0 to v1.10.2 are vulnerable to HTML injection where an attacker can inject malicious code inside the first name and last name field while inviting a new user which will be reflected in the invitatio…

CVSS 3.1MEDIUM 5.4 Network Low privileges User interaction EPSS 0.00615 Published 2022-05-18 No fix listed CWE-74
TI-2022-07240 CVE-2022-23067 · GHSA-c4fh-wf5v-23wx

ToolJet - Token Leakage via Referer Header

Priority MEDIUM 41

ToolJet versions v0.5.0 to v1.2.2 are vulnerable to token leakage via Referer header that leads to account takeover .

CVSS 3.1HIGH 8.8 Network No auth User interaction EPSS 0.01308 Published 2022-05-18 No fix listed CWE-200