CVE-2022-23067 ToolJet - Token Leakage via Referer Header

What is CVE-2022-23067?

CVE-2022-23067 is a high-severity vulnerability in ToolJet, published on 18 May 2022. An attacker can exploit it over the internet without logging in, and only if a user opens a file or follows a link.

Official description

ToolJet versions v0.5.0 to v1.2.2 are vulnerable to token leakage via Referer header that leads to account takeover . If the user opens the invite link/signup link and then clicks on any external links within the page, it leaks the password set token/signup token in the referer header. Using these tokens the attacker can access the user’s account.

Weakness: CWE-200

Which versions are affected by CVE-2022-23067?

It affects 1 product.

Products include Tooljet Tooljet.

How do I fix CVE-2022-23067?

No fix has been published for CVE-2022-23067 yet. Limit exposure of the affected software until one is available.

Is CVE-2022-23067 being exploited?

There is no known exploitation of CVE-2022-23067 in the wild and no public exploit code.

Other vulnerabilities in ToolJet

• CVE-2022-3422 Improper Privilege Management in tooljet/tooljet Critical 9.8
• CVE-2022-2631 Improper Access Control in tooljet/tooljet Critical 9.8
• CVE-2022-2037 Excessive Attack Surface in tooljet/tooljet Critical 9.8
• CVE-2022-27978 Business logic in n/a High 7.5
• CVE-2022-3019 Improper Access Control in tooljet/tooljet High 7.1

Sources

• CVE record
• NVD
• OSV
• GitHub advisory
• How this page is made

Also known as GHSA-c4fh-wf5v-23wx.