ZeroHour

CVE-2022-3348

PoC
CVSS 3.1
4.9 medium
EPSS
<1%p58
Published
()
Modified
Description

Just like in the previous report, an attacker could steal the account of different users. But in this case, it's a little bit more specific, because it is needed to be an editor in the same app as the victim.

Vendors
tooljet
Products
tooljet
Weakness
CWE-200
Vector
CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:N/A:N

In the news

No ingested article mentions this CVE yet.