ToolJet is vulnerable to Denial of Service (DoS)

概要

参考情報

• nvd.nist.gov/vuln/detail/CVE-2022-4111 · ADVISORY
• ToolJet/ToolJet#4103 · WEB
• tooljet/tooljet commit 01cd3f0 · WEB
• ToolJet/ToolJet · PACKAGE
• huntr.dev/bounties/5596d072-66d2-4361-8cac-101c9c781c3d · WEB

tooljet のその他の脆弱性

• CVE-2026-54344高 8.8ToolJet is an open-source low-code platform for building internal tools. Prior to 3.20.180, ToolJet's render preview deployment workflow int…
• CVE-2022-27979中 5.4A cross-site scripting (XSS) vulnerability in ToolJet v1.6.0 allows attackers to execute arbitrary web scripts or HTML via a crafted payload…
• CVE-2022-27978高 7.5Tooljet v1.6 does not properly handle missing values in the API, allowing attackers to arbitrarily reset passwords via a crafted HTTP reques…
• CVE-2022-3422高 7.5Account Takeover :: when see the info i can see the hash pass i can creaked it ............... Account Takeover :: when see the info i can s…
• CVE-2022-3348中 4.9Just like in the previous report, an attacker could steal the account of different users. But in this case, it's a little bit more specific,…