2023-04-26 00:00:00
mitre
PUBLISHED
Tooljet v1.6 does not properly handle missing values in the API, allowing attackers to arbitrarily reset passwords via a crafted HTTP request.