VYPR
← All advisories
Medium severity5.4NVD Advisory· Published May 18, 2022· Updated Jun 17, 2026

CVE-2022-23068

CVE-2022-23068

Description

ToolJet versions v0.6.0 to v1.10.2 are vulnerable to HTML injection where an attacker can inject malicious code inside the first name and last name field while inviting a new user which will be reflected in the invitational e-mail.

AI Insight

LLM-synthesized narrative grounded in this CVE's description and references.

Affected products

3
  • ToolJet/ToolJet3 versions
    cpe:2.3:a:tooljet:tooljet:*:*:*:*:*:*:*:*+ 2 more
    • cpe:2.3:a:tooljet:tooljet:*:*:*:*:*:*:*:*range: >=0.6.0,<=1.10.2
    • (no CPE)range: v0.6.0 to v1.10.2
    • (no CPE)range: 0.6.0

Patches

Vulnerability mechanics

References

2

News mentions

0

No linked articles in our index yet.