Security Advisory

CVE-2022-27978

CVE vulnerability detail - eXtreme Datacenter Security Operations

Published 2023-04-26 00:00:00

Last updated 2026-07-09 00:18:21

Assigner mitre

CVSS score not scored

State PUBLISHED

Tooljet v1.6 does not properly handle missing values in the API, allowing attackers to arbitrarily reset passwords via a crafted HTTP request.