Tooljettooljet (Tooljet) - vulnerabilities (CVEs)

6 CVEs, 0 in the last 30 days, 1 known versions, newest CVE from 2022-11-22. Vendor: Tooljet.

CVEs of Tooljettooljet

• CVE-2022-4111 - CVSS 6.5 (medium), 2022-11-22: Unrestricted file size limit can lead to DoS in tooljet/tooljet <1.27 by allowing a logged in attacker to upload profile pictures over 2MB.
• CVE-2022-3422 - CVSS 9.8 (critical), 2022-10-07: Account Takeover :: when see the info i can see the hash pass i can creaked it ............... Account Takeover :: when see the info i can see the…
• CVE-2022-3348 - CVSS 6.5 (medium), 2022-09-28: Just like in the previous report, an attacker could steal the account of different users. But in this case, it's a little bit more specific, because it is…
• CVE-2022-3019 - CVSS 8.8 (high), 2022-08-29: The forgot password token basically just makes us capable of taking over the account of whoever comment in an app that we can see (bruteforcing comment id's…
• CVE-2022-2631 - CVSS 9.8 (critical), 2022-08-02: Improper Access Control in GitHub repository tooljet/tooljet prior to v1.19.0.
• CVE-2022-2037 - CVSS 9.8 (critical), 2022-06-09: Excessive Attack Surface in GitHub repository tooljet/tooljet prior to v1.16.0.