RE
Product
Retool
3
CVEs
0
On KEV
7.1
Max CVSS
1
New 30D
Severity mix
Critical 0High 1Medium 2Low 0
Watch
Add Retool to your stack to get only the CVEs that touch what you run.
| CVE | CVSS | Published | Summary · affected versions |
|---|---|---|---|
| CVE-2025-47424 | 7.1 | May 9 | Retool (self-hosted) before 3.196.0 allows Host header injection Affected: 3.18.1 through 3.18.23; 3.20.1 through 3.20.18; 3.22.1 through 3.22.21; 3.24.1 through 3.24.22; 3.26.4 through 3.26.14; 3.28.3 through 3.28.15; +7 more |
| CVE-2024-42056 | 6.5 | Aug 22 | Retool (self-hosted enterprise) through 3.40.0 inserts resource authentication credentials into sent data Affected: 3.18.1 through 3.40.0 |
| CVE-2024-58394 | 6.1 | Oct 22 | Retool 3.88.0 XSS via /api/imageProxy SVG Proxying Affected: before 3.88.0 |
Showing 3