CVE-2022-4111

MEDIUM CVSS: 6.5 Published: 2022-11-22 Modified: 2026-06-17

Description

Unrestricted file size limit can lead to DoS in tooljet/tooljet <1.27 by allowing a logged in attacker to upload profile pictures over 2MB.

Affected Platforms

Tooljet Tooljet

Weakness Type

CWE-1284, CWE-1284

References