ToolJet before v3.16.208 fails to validate that the path organizationId matches the authenticated user's workspace before performing ToolJet DB table operations. A workspace admin can create, view, a…
Critical CVSS 9.1
Summary
ToolJet before v3.16.208 fails to validate that the path organizationId matches the authenticated user's workspace before performing ToolJet DB table operations. A workspace admin can create, view, and delete database tables in another workspace by replacing the organizationId parameter in table-management API requests.
In-depth triage
No in-depth report has been generated yet (DR-003 v2 AI pipeline is under construction).
Sources
- NVD DATABASE
Original Links
- https://github.com/ToolJet/ToolJet/security/advisories/GHSA-2jhv-482p-4php
- https://www.vulncheck.com/advisories/tooljet-before-3.16.208-cross-workspace-authorization-bypass
- https://github.com/ToolJet/ToolJet/security/advisories/GHSA-2jhv-482p-4php
Timeline
- nvd_ingest NVD