Paper/Archive/CVE-2022-2631

CVE-2022-2631

tooljet tooljet/tooljet — Improper Access Control in tooljet/tooljet

EPSS 1%CVSS 9.8

critical.is priorityof 100

43

CVSS 9.8 (CNA)9.8 / 10 × 3029.4 Not in CISA KEV+300.0 EPSS percentile 68.0.680 × 2013.6 No public exploit+100.0 SSVC exploitation: unknown+100.0

Description · from the CVE record

Improper Access Control in GitHub repository tooljet/tooljet prior to v1.19.0.

Affected

ProductAffectedFixed inSource

tooljet/tooljetunspecified – < v1.19.0v1.19.0CNA

Scores by source

@huntrdev (CNA)9.8CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

References

refhuntr.dev/bounties/86881f9e-ca48-49b5-9782-3c406316930c refgithub.com/tooljet/tooljet/commit/b9fa229bcae356cbb33300b31483e97e6ea140a7