Lucene search

K
cvelistMitreCVELIST:CVE-2022-27978
HistoryApr 26, 2023 - 12:00 a.m.

CVE-2022-27978

2023-04-2600:00:00
mitre
www.cve.org
2
cve-2022-27978
tooljet v1.6
api
password resets
http request

0.001 Low

EPSS

Percentile

45.5%

Tooljet v1.6 does not properly handle missing values in the API, allowing attackers to arbitrarily reset passwords via a crafted HTTP request.

0.001 Low

EPSS

Percentile

45.5%

Related for CVELIST:CVE-2022-27978