CVE-2022-2037
Excessive Attack Surface in GitHub repository tooljet/tooljet prior to v1.16.0.
Scoring
- Severity
- CRITICAL
- CVSS base score
- 9.8
- CVSS vector
- CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
- EPSS probability
- 0.33%
- CWE
- CWE-1125
- Published
- 2022-06-09
- Last modified
- 2026-03-13
Affected products
- tooljet tooljet/tooljet
Weakness type
Related vulnerabilities
- CVE-2024-5386 — Account Hijacking via Password Reset Token Leak in lunary-ai/lunary
- CVE-2023-49722 — Network port 8899 open in WiFi firmware of BCC101/BCC102/BCC50 products, that allows an attacker to...
- CVE-2023-0435 — Excessive Attack Surface in pyload/pyload
- CVE-2022-1715 — Account Takeover in neorazorx/facturascripts