Skip to content
CVE PROGRAM SOURCE RECORD9.8 Critical

CVE-2022-3422

Improper Privilege Management in tooljet/tooljet

Description

Account Takeover :: when see the info i can see the hash pass i can creaked it ............... Account Takeover :: when see the info i can see the forgot_password_token the hacker can send the request and changed the pass

Affected products

Version statuses are supplied by the assigning organization. Consult the original record for detailed ranges and platform conditions.

tooljet tooljet/tooljet

  • unspecified to < v1.26.1affected

References