CVE-2022-3348 : Security Advisory and Response

A vulnerability has been identified in tooljet/tooljet that could allow an attacker to steal the accounts of different users. This specific issue requires the attacker to be an editor in the same app as the victim.

Understanding CVE-2022-3348

This CVE involves the exposure of sensitive information to an unauthorized actor in tooljet/tooljet.

What is CVE-2022-3348?

Just like in the previous report, an attacker could steal the account of different users. But in this case, it's a little bit more specific, because it is needed to be an editor in the same app as the victim.

The Impact of CVE-2022-3348

The vulnerability has a CVSS v3.0 base score of 6.5, categorizing it as a medium severity issue. It has a low attack complexity with high confidentiality and integrity impacts. The privileges required for exploitation are high.

Technical Details of CVE-2022-3348

Vulnerability Description

The vulnerability allows an attacker, who needs to be an editor in the same app as the victim, to expose sensitive information.

Affected Systems and Versions

The vulnerability affects tooljet/tooljet versions less than v1.26.0.

Exploitation Mechanism

The attack vector is through the network, with no user interaction required. The scope remains unchanged.

Mitigation and Prevention

Immediate Steps to Take

Users are advised to update to version v1.26.0 or later to mitigate the vulnerability. Restricting access permissions can also help prevent unauthorized exposure of sensitive information.

Long-Term Security Practices

Regularly monitor for updates and security advisories related to tooljet/tooljet to stay informed about potential vulnerabilities and apply patches promptly.

Patching and Updates

Vendor-issued patches and updates should be applied as soon as they are available to ensure the security of the system.