Retool vulnerabilities
2 published CVEs name Retool among the affected products.
- 2Published CVEs2 of them scored
- 1Last 12 monthspublished in the last year
- 0Critical1 more rated high
- 0Known exploitedin CISA's KEV catalog
Newest CVEs
- CVE-2024-58394
Retool < 3.88.0 XSS via /api/imageProxy SVG Proxying
Retool · Retool
Medium5.1 - CVE-2025-47424
Retool (self-hosted) before 3.196.0 allows Host header injection. When the BASE_DOMAIN environment variable is not set, the HTTP host header can be manipulated.
Retool · Retool
High7.1