PT-2022-15826 · Tooljet · Tooljet

Published 2022-05-18 · Updated 2022-05-26 · CVE-2022-23067

Positive Technologies (AI Summary)

CVSS v3.1

8.8

High

Base vector

AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H

Name of the Vulnerable Software and Affected Versions ToolJet versions v0.5.0 to v1.2.2

Description The issue allows for token leakage via the Referer header, leading to account takeover. When a user opens an invite link or signup link and then clicks on external links within the page, the password set token or signup token is leaked in the Referer header. An attacker can use these tokens to access the user's account.

Recommendations For ToolJet versions v0.5.0 to v1.2.2, consider restricting access to external links within the invite link/signup link page until a fix is available. As a temporary workaround, avoid using the invite link/signup link feature to minimize the risk of token leakage.

Exploit

Fix

Information Disclosure

Weakness Enumeration

CWE-200

Related Identifiers

CVE-2022-23067

Affected Products

Tooljet

References · 5

• 🔥 https://whitesourcesoftware.com/vulnerability-database/CVE-2022-23067 · Exploit
• https://github.com/ToolJet/ToolJet/commit/eacbfc4c9da089ff9cda9edf8a1156390ae8a101 · Patch
• https://nvd.nist.gov/vuln/detail/CVE-2022-23067 · Security Note
• https://osv.dev/vulnerability/CVE-2022-23067 · Vendor Advisory
• https://t.me/cibsecurity/42911 · Telegram Post