Skip to content
Threat Feed
Subscribe

Vendor

ToolJet

2 briefs RSS
high advisory

ToolJet Database Privilege Escalation in join_tables Endpoint

ToolJet Database versions prior to 3.16.44 contain a privilege escalation vulnerability in the join_tables endpoint that permits unauthenticated access to arbitrary tables across workspaces.

ToolJet Database
1t 1c
critical advisory

ToolJet Multi-Tenancy Broken Access Control

ToolJet versions prior to 3.16.208 are vulnerable to broken access control, allowing authenticated builder-role users to perform unauthorized database operations across tenant boundaries.

ToolJet webserver broken-access-control vulnerability web-application-vulnerability authorization-bypass privilege-escalation web-application authentication-bypass +1
4t 1c