Skip to content
OpenAdvisories

Product · ToolJet

tooljet/tooljet

6 known vulnerabilities.

All Critical High Medium Low Exploited only Public exploit

2 results · Clear filters · Feed

  • Medium 6.5
    CVE-2022-4111

    Improper Validation of Specified Quantity in Input in tooljet/tooljet

    Unrestricted file size limit can lead to DoS in tooljet/tooljet <1.27 by allowing a logged in attacker to upload profile pictures over 2MB.

    ToolJet tooljet/tooljet tooljet npm
  • Medium 6.5
    CVE-2022-3348

    Exposure of Sensitive Information to an Unauthorized Actor in tooljet/tooljet

    Just like in the previous report, an attacker could steal the account of different users. But in this case, it's a little bit more specific, because it is needed to be an editor in the same app as the victim.

    ToolJet tooljet/tooljet