Skip to content
Threat Feed
Subscribe

Product

ToolJet (< 3.16.208)

1 brief RSS
critical advisory

ToolJet Multi-Tenancy Broken Access Control

ToolJet versions prior to 3.16.208 are vulnerable to broken access control, allowing authenticated builder-role users to perform unauthorized database operations across tenant boundaries.

ToolJet webserver broken-access-control vulnerability web-application-vulnerability authorization-bypass privilege-escalation web-application authentication-bypass +1
4t 1c