tooljet/tooljet vulnerabilities
2 known vulnerabilities in tooljet/tooljet from ToolJet. 2 are rated high or critical. Each entry lists the affected versions and the release that fixes it, where the vendor has published one.
2vulnerabilities
0critical
2high
0exploited
8.2average CVSS score
Latest first
- 7.5 High severity
tooljet/tooljet: Improper Privilege Management
Account Takeover :: when see the info i can see the hash pass i can creaked it ............... Account Takeover :: when see the info i can see the forgot_password_token the hacker can send the request and changed the pass
- 8.8 High severity
tooljet/tooljet: Authorization Bypass Through User-Controlled Key
The forgot password token basically just makes us capable of taking over the account of whoever comment in an app that we can see (bruteforcing comment id's might also be an option but I wouldn't count on it, since it would take a long time to find a valid one