Skip to content
CVE PROGRAM SOURCE RECORD6.5 Medium

CVE-2022-4111

Improper Validation of Specified Quantity in Input in tooljet/tooljet

Description

Unrestricted file size limit can lead to DoS in tooljet/tooljet <1.27 by allowing a logged in attacker to upload profile pictures over 2MB.

Affected products

Version statuses are supplied by the assigning organization. Consult the original record for detailed ranges and platform conditions.

tooljet tooljet/tooljet

Default version status: unaffected

  • unspecified to < v1.27.0affected

References