VYPR
Moderate severityNVD Advisory· Published Nov 22, 2022· Updated Apr 24, 2025

Improper Validation of Specified Quantity in Input in tooljet/tooljet

CVE-2022-4111

Description

Unrestricted file size limit can lead to DoS in tooljet/tooljet <1.27 by allowing a logged in attacker to upload profile pictures over 2MB.

AI Insight

LLM-synthesized narrative grounded in this CVE's description and references.

Affected packages

Versions sourced from the GitHub Security Advisory.

PackageAffected versionsPatched versions
tooljetnpm
< 1.27.01.27.0

Affected products

2

Patches

Vulnerability mechanics

References

5

News mentions

0

No linked articles in our index yet.