← Database

CVE-2022-27978

HIGH CVSS: 7.5 Published: 2023-04-26 Modified: 2026-07-09

Description

Tooljet v1.6 does not properly handle missing values in the API, allowing attackers to arbitrarily reset passwords via a crafted HTTP request.

Affected Platforms

Tooljet Tooljet

Weakness Type

CWE-755

References