CVE-2022-23067

See a problem?
Please try reporting it to the source first.

Source

https://cve.org/CVERecord?id=CVE-2022-23067

Import Source

https://storage.googleapis.com/cve-osv-conversion/osv-output/CVE-2022-23067.json

JSON Data

https://api.osv.dev/v1/vulns/CVE-2022-23067

Published

2022-05-18T11:45:13.472Z

Modified

2026-07-15T01:48:56.050998531Z

Severity

8.8 (High) CVSS_V3 - CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H CVSS Calculator

Summary

ToolJet - Token Leakage via Referer Header

Details

ToolJet versions v0.5.0 to v1.2.2 are vulnerable to token leakage via Referer header that leads to account takeover . If the user opens the invite link/signup link and then clicks on any external links within the page, it leaks the password set token/signup token in the referer header. Using these tokens the attacker can access the user’s account.

Database specific

{
    "osv_generated_from": "https://github.com/CVEProject/cvelistV5/tree/main/cves/2022/23xxx/CVE-2022-23067.json",
    "cwe_ids": [
        "CWE-200"
    ],
    "cna_assigner": "Mend"
}

References

Affected packages

Git / github.com/tooljet/tooljet

Affected ranges

Type

GIT

Repo

https://github.com/tooljet/tooljet

Events

Introduced

a5e45dedeaa294e1554497352570db02dad3fd7d

Fixed

eacbfc4c9da089ff9cda9edf8a1156390ae8a101

Database specific

{
    "extracted_events": [
        {
            "introduced": "0.5.0"
        },
        {
            "last_affected": "1.2.2"
        }
    ],
    "source": [
        "CPE_RANGE",
        "REFERENCES"
    ],
    "cpe": "cpe:2.3:a:tooljet:tooljet:*:*:*:*:*:*:*:*"
}

Affected versions

0.*

0.5.0

Other

bump-version

fix-csp

fix-dyn-vars

fix-ec2

fix-image

fix-k8s

fix-mongo

fix-pg-queries

fix-setup

fix-webpack

v0.*

v0.10.0

v0.10.0-hotfix.1

v0.10.1

v0.10.1-hotfix.1

v0.11.0

v0.12.0

v0.12.1

v0.13.0

v0.5.0

v0.5.1

v0.5.10

v0.5.11

v0.5.12

v0.5.13

v0.5.14

v0.5.2

v0.5.3

v0.5.4

v0.5.5

v0.5.6

v0.5.7

v0.5.8

v0.5.9

v0.6.0

v0.6.1

v0.7.0

v0.7.1

v0.7.2

v0.7.3

v0.7.4

v0.8.0

v0.8.1

v0.8.1-ee.1.0.0

v0.9.0

v0.9.1

v0.9.2

v0.9.3

v0.9.3-hotfix.2

Database specific

source

"https://storage.googleapis.com/cve-osv-conversion/osv-output/CVE-2022-23067.json"