PT-2022-25662 · Tooljet · Tooljet

Published 2022-11-22 · Updated 2023-07-11 · CVE-2022-4111

Positive Technologies (AI Summary)

CVSS v3.1

6.5

Medium

Base vector

AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H

Name of the Vulnerable Software and Affected Versions tooljet/tooljet versions prior to 1.27

Description The issue allows a logged-in attacker to upload large files, such as profile pictures over 2MB, due to an unrestricted file size limit. This can lead to a denial of service (DoS) if multiple users upload large files, causing network congestion and slowing down the site. For example, if a botnet uploads 100MB files from 100 machines simultaneously, it could handle 10GB of data and make the site unavailable.

Recommendations For versions prior to 1.27, update to version 1.27.0 or later to fix the issue. As a temporary workaround, consider restricting file uploads or limiting the file size for user avatars to prevent denial of service attacks.

Exploit

Fix

Resource Exhaustion

Weakness Enumeration

CWE-400

CWE-1284

Related Identifiers

CVE-2022-4111

GHSA-HGP8-W8FJ-R4CM

Affected Products

Tooljet

References · 9

• 🔥 https://github.com/CVEProject/cvelistV5/tree/main/cves/2022/4xxx/CVE-2022-4111.json · Exploit
• 🔥 https://huntr.dev/bounties/5596d072-66d2-4361-8cac-101c9c781c3d · Exploit
• https://github.com/tooljet/tooljet/commit/01cd3f0464747973ec329e9fb1ea12743d3235cc · Patch
• https://nvd.nist.gov/vuln/detail/CVE-2022-4111 · Security Note
• https://osv.dev/vulnerability/CVE-2022-4111 · Vendor Advisory
• https://osv.dev/vulnerability/GHSA-hgp8-w8fj-r4cm · Vendor Advisory
• https://github.com/ToolJet/ToolJet · Note
• https://github.com/ToolJet/ToolJet/pull/4103 · Note
• https://t.me/cibsecurity/53315 · Telegram Post