| Package | Affected versions | Patched versions |
|---|---|---|
| tooljet | = 1.6 |
Tooljet v1.6 does not properly handle missing values in the API, allowing attackers to arbitrarily reset passwords via a crafted HTTP request.
Running one of these products? Scan your site to see whether it exposes a vulnerable version.
Scan my site free