Описание
Just like in the previous report, an attacker could steal the account of different users. But in this case, it's a little bit more specific, because it is needed to be an editor in the same app as the victim.
Ссылки
- PatchThird Party Advisory
- ExploitPatchThird Party Advisory
- PatchThird Party Advisory
- ExploitPatchThird Party Advisory
Уязвимые конфигурации
Конфигурация 1Версия до 2022-09-11 (исключая)
cpe:2.3:a:tooljet:tooljet:*:*:*:*:*:*:*:*
EPSS
Процентиль: 54%
0.00311
Низкий
6.5 Medium
CVSS3
4.9 Medium
CVSS3
Дефекты
CWE-200
Связанные уязвимости
CVSS3: 4.9
github
больше 3 лет назад
Just like in the previous report, an attacker could steal the account of different users. But in this case, it's a little bit more specific, because it is needed to be an editor in the same app as the victim.
EPSS
Процентиль: 54%
0.00311
Низкий
6.5 Medium
CVSS3
4.9 Medium
CVSS3
Дефекты
CWE-200