github.com
https://github.com/nocodb/nocodb/commit/000ecd886738b965b5997cd905825e3244f48b95 CVE-2022-2339
HIGH
Server-Side Request Forgery (SSRF) in nocodb/nocodb
Record summary
CVE-2022-2339 has a selected CVSS score of 7.5 (high).
Description
With this SSRF vulnerability, an attacker can reach internal addresses to make a request as the server and read it's contents. This attack can lead to leak of sensitive information.
Description source: CVE List
Affected products and versions
1| Product | Source | Version range | Status |
|---|---|---|---|
nocodb/nocodbBrowse nocodb / nocodb/nocodb | CVE List | Before 0.92.0 | affected |
References
3huntr.devConfirmation
https://huntr.dev/bounties/fff06de8-2a82-49b1-8e81-968731e87eef nvd.nist.gov
https://nvd.nist.gov/vuln/detail/CVE-2022-2339