CVE-2022-4111: 
JavaScript vulnerability analysis and mitigation

Unrestricted file size limit vulnerability in ToolJet versions prior to 1.27 (CVE-2022-4111) allows a logged-in attacker to upload profile pictures over 2MB, potentially leading to a Denial of Service condition (MITRE CVE).

The vulnerability stems from a missing file size validation in the user avatar upload functionality. The issue exists in the users.controller.ts file where there was no size restriction on uploaded profile pictures before the fix. The vulnerability was addressed by implementing a maximum file size limit of 2MB (MAX_AVATAR_FILE_SIZE = 1024 * 1024 * 2) (GitHub Commit).

The vulnerability could allow authenticated users to upload arbitrarily large profile pictures, potentially leading to server storage exhaustion and Denial of Service conditions (MITRE CVE).

The vulnerability requires authentication to exploit, as the attacker needs to be logged into the system to upload profile pictures. The exploitation process is straightforward, involving uploading profile pictures larger than 2MB through the user interface (GitHub Commit).

The vulnerability has been fixed in ToolJet version 1.27 and later by implementing a file size validator that restricts profile picture uploads to a maximum of 2MB. The fix includes throwing a BadRequestException when files exceed this limit (GitHub Commit).