Unrated

ToolJet - HTML Injection in Invite New User

CVE-2022-23068 First seen on SecPulse May 18, 2022

Original description The description as published by the source.

ToolJet versions v0.6.0 to v1.10.2 are vulnerable to HTML injection where an attacker can inject malicious code inside the first name and last name field while inviting a new user which will be reflected in the invitational e-mail.

Source: OSV.dev (Open Source Vulnerabilities) NVD OSV

References

advisory github.com
advisory nvd.nist.gov
patch github.com
web whitesourcesoftware.com

Key facts

Severity: Unrated
Published: May 18, 2022
First seen on SecPulse: May 18, 2022
CWE: CWE-74

NVD OSV

Detection sources

OSV.dev (Open Source Vulnerabilities)Oct 20, 20:01