cve/2022/CVE-2022-3422.md

### [CVE-2022-3422](https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-3422)
![](https://img.shields.io/static/v1?label=Product&message=tooljet%2Ftooljet&color=blue)
![](https://img.shields.io/static/v1?label=Version&message=%3C%20v1.26.1%20&color=brighgreen)
![](https://img.shields.io/static/v1?label=Vulnerability&message=CWE-269%20Improper%20Privilege%20Management&color=brighgreen)

### Description

Account Takeover :: when see the info i can see the hash pass i can creaked it ............... Account Takeover :: when see the info i can see the forgot_password_token the hacker can send the request and changed the pass

### POC

#### Reference
- https://huntr.dev/bounties/02da53ab-f613-4171-8766-96b31c671551

#### Github
No PoCs found on GitHub currently.