Количество 2
Количество 2
CVE-2022-27978
почти 3 года назад
Tooljet v1.6 does not properly handle missing values in the API, allowing attackers to arbitrarily reset passwords via a crafted HTTP request.
CVSS3: 7.5
EPSS: Низкий
GHSA-wxm6-gcq6-r4p5
почти 3 года назад
Tooljet v1.6 does not properly handle missing values in the API, allowing attackers to arbitrarily reset passwords via a crafted HTTP request.
CVSS3: 7.5
EPSS: Низкий
Уязвимостей на страницу
20
Уязвимость | CVSS | EPSS | Опубликовано | |
|---|---|---|---|---|
CVE-2022-27978 Tooljet v1.6 does not properly handle missing values in the API, allowing attackers to arbitrarily reset passwords via a crafted HTTP request. | CVSS3: 7.5 | 0% Низкий | почти 3 года назад | |
GHSA-wxm6-gcq6-r4p5 Tooljet v1.6 does not properly handle missing values in the API, allowing attackers to arbitrarily reset passwords via a crafted HTTP request. | CVSS3: 7.5 | 0% Низкий | почти 3 года назад |
Уязвимостей на страницу
20