CVE-2022-27979
Cross-site scripting in Tooljet
CVSS score
5.4
EPSS probability
%0.5
Risk score
0.0
Published
3 y ago
Public Exploits · GitHub and Metasploit Intelligence
This tab scans the sources that NVD labels as exploits, GitHub repositories matching the CVE identifier and Rapid7 Metasploit Framework modules. Only links to sources that were actually found are shown.
https://github.com/fourcube/security-advisories/blob/main/security-advisories/20220321-tooljet-xss.md
Makefile Go / Python
Similar Vulnerabilities
7.5
CVE-2022-27978Vulnerability in Tooljet
Patch status unknown Public Exploits:1EPSS %1
9.4
7.1
CVE-2026-82872ToolJet before v3.16.208 Cross-Workspace Authorization Bypass
Patch status unknownEPSS %1
8.2
8.2
CVE-2026-82869ToolJet Database before v3.16.44 Privilege Escalation via join_tables
Patch status unknownEPSS %0
8.8
CVE-2026-54344OS command injection in Tooljet
Patch status unknown Public Exploits:1EPSS %0
Get this vulnerability through the API
Affected products, version ranges, exploitation status and patch information in a single request, with a free key.
curl -H "x-api-key: $DAYBREACH_API_KEY" \ "https://api.daybreach.dev/api/v1/intel/cves/CVE-2022-27979"