Skip to content
OpenAdvisories
Medium · 6.5 CVE-2022-4111 EUVD-2022-7364GHSA-hgp8-w8fj-r4cm

Improper Validation of Specified Quantity in Input in tooljet/tooljet

Published Nov 22, 2022 · Updated Apr 24, 2025 · Assigned by @huntrdev

Vendor: ToolJet Product: tooljet/tooljet Package: tooljet Ecosystem: npm

Description

Unrestricted file size limit can lead to DoS in tooljet/tooljet <1.27 by allowing a logged in attacker to upload profile pictures over 2MB.

Affected products

VendorProductAffectedFixed
tooljet tooljet/tooljet unspecified – < v1.27.0 v1.27.0

Affected packages

EcosystemPackageAffectedFixedRecord
npm tooljet < 1.27.0 1.27.0 GHSA-hgp8-w8fj-r4cm

References