수정 버전
3.20 에 영향을 주는 CVE
| CVE | 제목 | CVSS | 악용 | EPSS | 공개일 |
|---|---|---|---|---|---|
| CVE-2022-23067 | ToolJet - Token Leakage via Referer Header | 8.8 | — | 2022-05-18 | |
| CVE-2026-54344 | ToolJet GitHub Actions comment body shell injection exposes deployment secrets | 8.8 | — | 2026-07-08 | |
| CVE-2026-118685 | ToolJet 3.20.2-lts before 3.20.242-lts Signup Bypass via SignupDisableGuard | 6.9 | — | 2026-10-29 | |
| CVE-2026-73068 | ToolJet: Cross-tenant Broken Access Control in ToolJet Database (tooljet-db): any authenticated user can read... | 5.9 | — | 2026-08-12 | |
| CVE-2022-23068 | ToolJet - HTML Injection in Invite New User | 5.4 | — | 2022-05-18 | |
| CVE-2026-70642 | ToolJet < 3.21.94 Authorization Bypass via app-environments/init | 5.3 | — | 2026-11-13 | |
| CVE-2022-3348 | Exposure of Sensitive Information to an Unauthorized Actor in tooljet/tooljet | 4.9 | — | 2022-09-28 |
내 서버의 버전을 직접 추적하세요
InfraGuard 는 모든 서버에 설치된 소프트웨어 버전을 수집하고, 알려진 취약점이 있는 버전을 알려 줍니다. 자체 호스팅이라 데이터가 내 네트워크를 벗어나지 않습니다.
데이터: CVE List(CVE® Program), NVD, CISA KEV, FIRST EPSS(EPSS 는 https://www.first.org/epss 참고), endoflife.date. 소프트웨어 목록: awesome-selfhosted(CC BY-SA 3.0).