CVE-2022-3422: Tooljet

High severity, CVSS 7.5. EPSS: 1% chance of exploitation in the next 30 days.

Account Takeover :: when see the info i can see the hash pass i can creaked it ............... Account Takeover :: when see the info i can see the forgot_password_token the hacker can send the request and changed the pass

Affected products

• Tooljet Tooljet: before 1.26.1 (fixed in 1.26.1)

Published 2022-10-07. Last modified 2026-06-17.