CVE-2026-28360
MEDIUMNocoDB <0.301.3 - Info Disclosure
Title source: llmDescription
NocoDB is software for building databases as spreadsheets. Prior to version 0.301.3, shared view passwords were stored in plaintext in the database and compared using direct string equality. This issue has been patched in version 0.301.3.
Scores
CVSS v3
5.3
EPSS
0.0004
EPSS Percentile
11.5%
Attack Vector
NETWORK
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N
Classification
CWE
CWE-256
Status
published
Affected Products (2)
nocodb/nocodb
< 0.301.3
npm/nocodb
< 0.301.3npm
Timeline
Published
Mar 02, 2026
Tracked Since
Mar 03, 2026