Unrated severityNVD Advisory· Published May 18, 2022· Updated Sep 17, 2024

ToolJet - HTML Injection in Invite New User

CVE-2022-23068

Description

ToolJet versions v0.6.0 to v1.10.2 are vulnerable to HTML injection where an attacker can inject malicious code inside the first name and last name field while inviting a new user which will be reflected in the invitational e-mail.

AI Insight

LLM-synthesized narrative grounded in this CVE's description and references.

Affected products

ToolJet/ToolJetllm-fuzzy2 versions
>=0.6.0 and <=1.10.2+ 1 more
- (no CPE)range: >=0.6.0 and <=1.10.2
- (no CPE)range: 0.6.0

Patches

Vulnerability mechanics

References

github.com/ToolJet/ToolJet/commit/431dc961cdfe4d26343d1c1c951ced778fbddb58mitrex_refsource_MISC
www.whitesourcesoftware.com/vulnerability-database/CVE-2022-23068mitrex_refsource_MISC

News mentions

No linked articles in our index yet.

cvss	0.000
epss	0.000
exploit	0.000
kev	0.000
patch	0.000
ransomware	0.000