cve.bz

CVE-2022-3019

8.8 highEPSS 1.0%

High (8.8) in tooljet tooljet. EPSS 1.0% chance of exploitation in the next 30 days.

The forgot password token basically just makes us capable of taking over the account of whoever comment in an app that we can see (bruteforcing comment id's might also be an option but I wouldn't count on it, since it would take a long time to find a valid one).

Severity

CVSS 3.1

8.8 high
CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H
EPSS
1.0% chance of exploitation in the next 30 days; higher than 62% of CVEs (scores of 2026-10-31)
CWEs
CWE-639, CWE-284
Published
Modified
Record from
the NVD, synced

Affected

References

Check your stackJSON