CVE-2022-3348: falha de média gravidade em tooljet/tooljet
Exposure of Sensitive Information to an Unauthorized Actor in tooljet/tooljet
Publicada em · Atualizada em
Aviso por e-mail quando ela entrar no KEV, ganhar PoC pública ou subir de nota.
13Vexday Risk Score
Sem sinal de exploração. Nenhum artefato público de exploração conhecido até agora.
ssvc Trackcvss 6.5epss 1.1%
Just like in the previous report, an attacker could steal the account of different users. But in this case, it's a little bit more specific, because it is needed to be an editor in the same app as the victim.
CVSS:3.0/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:N
Produtos afetados
tooljet · tooljet/tooljetCVEs relacionadas — tooljet/tooljet
No mesmo produto, das mais perigosas para as menos.
CVE-2022-2631CRITICALImproper Access Control in tooljet/tooljetEPSS 1.2%CVE-2022-2037CRITICALExcessive Attack Surface in tooljet/tooljetEPSS 1.2%CVE-2022-3422CRITICALImproper Privilege Management in tooljet/tooljetEPSS 1.0%CVE-2022-3019HIGHImproper Access Control in tooljet/tooljetEPSS 1.0%CVE-2022-4111MEDIUMImproper Validation of Specified Quantity in Input in tooljet/tooljetEPSS 0.8%