CVE-2022-23067CWE-200

ToolJet - Token Leakage via Referer Header

High · published May 18, 2022

CVSS v3.1
8.8
EPSS
1%
Percentile
70.4
In the wild
Unconfirmed
What it is

ToolJet versions v0.5.0 to v1.2.2 are vulnerable to token leakage via Referer header that leads to account takeover . If the user opens the invite link/signup link and then clicks on any external links within the page, it leaks the password set token/signup token in the referer header. Using these tokens the attacker can access the user’s account.

The record
Technical detail
CVSS v3.1
8.8 · HIGH
Vector
CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H
CVSS v4.0
Not supplied
EPSS
0.01308 · 70.4th percentile
Weakness
CWE-200 · Exposure of Sensitive Information to an Unauthorized Actor
Published
2022-05-18T11:45Z
EPSS history
Timeline
  • 18 MAY 11:45Z
    ToolJet - Token Leakage via Referer Header
    cvelistv5