CVE-2022-2037

Excessive Attack Surface in GitHub repository tooljet/tooljet prior to v1.16.0.

• CWE-1125

• https://github.com/tooljet/tooljet/commit/fadf025365823cbbc739a1313791c0a04621972bPatch, Third Party Advisory
• https://huntr.dev/bounties/4431ef84-93f2-4bc5-bc1a-97d7f229b28eExploit, Third Party Advisory
• https://github.com/tooljet/tooljet/commit/fadf025365823cbbc739a1313791c0a04621972bPatch, Third Party Advisory
• https://huntr.dev/bounties/4431ef84-93f2-4bc5-bc1a-97d7f229b28eExploit, Third Party Advisory

Published

Jun 9, 2022

Last Modified

Jun 17, 2026

Status

Modified

• How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
• Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
• PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
• AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.

• CVE-2022-20364In sysmmu_unmap of TBD, there is a possible out of bounds wr…7.8
• CVE-2022-20365Product: AndroidVersions: Android kernelAndroid ID: A-229632…9.8
• CVE-2022-20366In ioctl_dpm_clk_update of lwis_ioctl.c, there is a possible…6.7
• CVE-2022-20367In construct_transaction of lwis_ioctl.c, there is a possibl…6.7
• CVE-2022-20368Product: AndroidVersions: Android kernelAndroid ID: A-224546…7.8
• CVE-2022-20369In v4l2_m2m_querybuf of v4l2-mem2mem.c, there is a possible …6.7
• CVE-2022-20370Product: AndroidVersions: Android kernelAndroid ID: A-215730…7.5
• CVE-2022-20371In dm_bow_dtr and related functions of dm-bow.c, there is a …6.4
• CVE-2022-20372In exynos5_i2c_irq of (TBD), there is a possible out of boun…6.7
• CVE-2022-20373In st21nfc_loc_set_polaritymode of fc/st21nfc.c, there is a …6.4
• CVE-2022-20374Rejected reason: DO NOT USE THIS CANDIDATE NUMBER. ConsultID…
• CVE-2022-20375In LteRrcNrProAsnDecode of LteRrcNr_Codec.c, there is a poss…7.5