nocodb Vulnerabilities and Affected Products
Vulnerabilities associated with nocodb/nocodb.
Products
Clear product- nocodb52 vulnerabilities
- nocodb/nocodb8 vulnerabilities
| Vulnerability | Title and context | CVSS | EPSS | PoCs | Signals | STIX action |
|---|---|---|---|---|---|---|
CVE-2023-5104MEDIUM | Improper Input Validation in nocodb/nocodbImproper Input Validation in GitHub repository nocodb/nocodb prior to 0.96.0. CWE-20Sep 21, 2023 | CVSS6.5v3.1 | EPSS0.638% | PoCs0 | SignalsNot listed in CISA KEVNo known ransomware useNo Nuclei templates | STIX |
CVE-2022-3423HIGH | Allocation of Resources Without Limits or Throttling in nocodb/nocodbAllocation of Resources Without Limits or Throttling in GitHub repository nocodb/nocodb prior to 0.92.0. | CVSS7.3v3.1 | EPSS1.91% | PoCs0 | SignalsNot listed in CISA KEVNo known ransomware useNo Nuclei templates | STIX |
CVE-2022-2339HIGH | Server-Side Request Forgery (SSRF) in nocodb/nocodbWith this SSRF vulnerability, an attacker can reach internal addresses to make a request as the server and read it's contents. This attack can lead to leak of sensitive information. CWE-918Jul 7, 2022 | CVSS7.5v3.1 | EPSS1.84% | PoCs0 | SignalsNot listed in CISA KEVNo known ransomware useNo Nuclei templates | STIX |
CVE-2022-2079MEDIUM | Cross-site Scripting (XSS) - Stored in nocodb/nocodbCross-site Scripting (XSS) - Stored in GitHub repository nocodb/nocodb prior to 0.91.7+. CWE-79Jun 14, 2022 | CVSS5.4v3.1 | EPSS0.693% | PoCs0 | SignalsNot listed in CISA KEVNo known ransomware useNo Nuclei templates | STIX |
CVE-2022-2064HIGH | Insufficient Session Expiration in nocodb/nocodbInsufficient Session Expiration in GitHub repository nocodb/nocodb prior to 0.91.7+. CWE-613Jun 13, 2022 | CVSS8.8v3.1 | EPSS1.19% | PoCs0 | SignalsNot listed in CISA KEVNo known ransomware useNo Nuclei templates | STIX |
CVE-2022-2063HIGH | Improper Privilege Management in nocodb/nocodbImproper Privilege Management in GitHub repository nocodb/nocodb prior to 0.91.7+. CWE-269Jun 13, 2022 | CVSS8.8v3.1 | EPSS1.39% | PoCs0 | SignalsNot listed in CISA KEVNo known ransomware useNo Nuclei templates | STIX |
CVE-2022-2062HIGH | Generation of Error Message Containing Sensitive Information in nocodb/nocodbGeneration of Error Message Containing Sensitive Information in GitHub repository nocodb/nocodb prior to 0.91.7+. | CVSS7.5v3.1 | EPSS1.45% | PoCs0 | SignalsNot listed in CISA KEVNo known ransomware useNo Nuclei templates | STIX |
CVE-2022-2022MEDIUM | Cross-site Scripting (XSS) - Stored in nocodb/nocodbCross-site Scripting (XSS) - Stored in GitHub repository nocodb/nocodb prior to 0.91.7. CWE-79Jun 7, 2022 | CVSS5.4v3.1 | EPSS0.789% | PoCs27 | SignalsNot listed in CISA KEVNo known ransomware useNo Nuclei templates | STIX |