CVE-2022-4111

Unrestricted file size limit can lead to DoS in tooljet/tooljet <1.27 by allowing a logged in attacker to upload profile pictures over 2MB.
Configurations

Configuration 1 (hide)

cpe:2.3:a:tooljet:tooljet:*:*:*:*:*:*:*:*

History

21 Nov 2024, 07:34

Type Values Removed Values Added
References () https://github.com/tooljet/tooljet/commit/01cd3f0464747973ec329e9fb1ea12743d3235cc - Patch, Third Party Advisory () https://github.com/tooljet/tooljet/commit/01cd3f0464747973ec329e9fb1ea12743d3235cc - Patch, Third Party Advisory
References () https://huntr.dev/bounties/5596d072-66d2-4361-8cac-101c9c781c3d - Exploit, Issue Tracking, Patch, Third Party Advisory () https://huntr.dev/bounties/5596d072-66d2-4361-8cac-101c9c781c3d - Exploit, Issue Tracking, Patch, Third Party Advisory

11 Jul 2023, 08:15

Type Values Removed Values Added
Summary Unrestricted file size limit can lead to DoS in tooljet/tooljet <1.27 by allowing a logged in attacker to upload profile pictures over 2MB. Unrestricted file size limit can lead to DoS in tooljet/tooljet <1.27 by allowing a logged in attacker to upload profile pictures over 2MB.

10 Jul 2023, 18:23

Type Values Removed Values Added
CWE CWE-400 CWE-1284

Information

Published : 2022-11-22 03:15

Updated : 2024-11-21 07:34


NVD link : CVE-2022-4111

Mitre link : CVE-2022-4111

CVE.ORG link : CVE-2022-4111


JSON object : View

Products Affected

tooljet

  • tooljet
CWE
CWE-1284

Improper Validation of Specified Quantity in Input