CVE-2022-3422

CVE-2022-3422 is an account takeover vulnerability affecting ToolJet, where an attacker could potentially gain unauthorized access to user accounts. This high-severity vulnerability (CVSS 7.5) allows an unauthenticated attacker to exploit weaknesses in password handling, specifically by accessing password hashes or forgotten password tokens, to reset or bypass user authentication. There is currently no evidence of active exploitation, public exploit code, or significant community discussion surrounding this CVE.