CVE-2022-4111mediumCWE-1284

CVE-2022-4111: falha de média gravidade em tooljet/tooljet

Improper Validation of Specified Quantity in Input in tooljet/tooljet

Publicada em · Atualizada em

Seguir esta CVE+ Monitorar tooljet/tooljet+ Monitorar tooljet

Aviso por e-mail quando ela entrar no KEV, ganhar PoC pública ou subir de nota.

13Vexday Risk Score

Sem sinal de exploração. Nenhum artefato público de exploração conhecido até agora.

ssvc Trackcvss 6.5epss 0.8%
Unrestricted file size limit can lead to DoS in tooljet/tooljet <1.27 by allowing a logged in attacker to upload profile pictures over 2MB.
CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H
Produtos afetados
tooljet · tooljet/tooljet
CVEs relacionadas — tooljet/tooljet

No mesmo produto, das mais perigosas para as menos.

CVE-2022-2631CRITICALImproper Access Control in tooljet/tooljetEPSS 1.2%CVE-2022-2037CRITICALExcessive Attack Surface in tooljet/tooljetEPSS 1.2%CVE-2022-3348MEDIUMExposure of Sensitive Information to an Unauthorized Actor in tooljet/tooljetEPSS 1.1%CVE-2022-3422CRITICALImproper Privilege Management in tooljet/tooljetEPSS 1.0%CVE-2022-3019HIGHImproper Access Control in tooljet/tooljetEPSS 1.0%