Vulnerability Details CVE-2022-22120
In NocoDB, versions 0.9 to 0.83.8 are vulnerable to Observable Discrepancy in the password-reset feature. When requesting a password reset for a given email address, the application displays an error message when the email isn't registered within the system. This allows attackers to enumerate the registered users' email addresses.
Exploit prediction scoring system (EPSS) score
EPSS Score 0.003
EPSS Ranking 50.8%
CVSS Severity
CVSS v3 Score 5.3
CVSS v2 Score 5.0
References
Products affected by CVE-2022-22120
-
cpe:2.3:a:xgenecloud:nocodb:0.10.0
-
cpe:2.3:a:xgenecloud:nocodb:0.10.1
-
cpe:2.3:a:xgenecloud:nocodb:0.10.2
-
cpe:2.3:a:xgenecloud:nocodb:0.10.3
-
cpe:2.3:a:xgenecloud:nocodb:0.10.4
-
cpe:2.3:a:xgenecloud:nocodb:0.10.5
-
cpe:2.3:a:xgenecloud:nocodb:0.10.6
-
cpe:2.3:a:xgenecloud:nocodb:0.11.0
-
cpe:2.3:a:xgenecloud:nocodb:0.11.1
-
cpe:2.3:a:xgenecloud:nocodb:0.11.10
-
cpe:2.3:a:xgenecloud:nocodb:0.11.11
-
cpe:2.3:a:xgenecloud:nocodb:0.11.12
-
cpe:2.3:a:xgenecloud:nocodb:0.11.13
-
cpe:2.3:a:xgenecloud:nocodb:0.11.14
-
cpe:2.3:a:xgenecloud:nocodb:0.11.15
-
cpe:2.3:a:xgenecloud:nocodb:0.11.16
-
cpe:2.3:a:xgenecloud:nocodb:0.11.17
-
cpe:2.3:a:xgenecloud:nocodb:0.11.18
-
cpe:2.3:a:xgenecloud:nocodb:0.11.19
-
cpe:2.3:a:xgenecloud:nocodb:0.11.20
-
cpe:2.3:a:xgenecloud:nocodb:0.11.21
-
cpe:2.3:a:xgenecloud:nocodb:0.11.22
-
cpe:2.3:a:xgenecloud:nocodb:0.11.23
-
cpe:2.3:a:xgenecloud:nocodb:0.11.24
-
cpe:2.3:a:xgenecloud:nocodb:0.11.25
-
cpe:2.3:a:xgenecloud:nocodb:0.11.26
-
cpe:2.3:a:xgenecloud:nocodb:0.11.28
-
cpe:2.3:a:xgenecloud:nocodb:0.11.29
-
cpe:2.3:a:xgenecloud:nocodb:0.11.3
-
cpe:2.3:a:xgenecloud:nocodb:0.11.30
-
cpe:2.3:a:xgenecloud:nocodb:0.11.31
-
cpe:2.3:a:xgenecloud:nocodb:0.11.32
-
cpe:2.3:a:xgenecloud:nocodb:0.11.33
-
cpe:2.3:a:xgenecloud:nocodb:0.11.34
-
cpe:2.3:a:xgenecloud:nocodb:0.11.36
-
cpe:2.3:a:xgenecloud:nocodb:0.11.39
-
cpe:2.3:a:xgenecloud:nocodb:0.11.4
-
cpe:2.3:a:xgenecloud:nocodb:0.11.40
-
cpe:2.3:a:xgenecloud:nocodb:0.11.41
-
cpe:2.3:a:xgenecloud:nocodb:0.11.42
-
cpe:2.3:a:xgenecloud:nocodb:0.11.43
-
cpe:2.3:a:xgenecloud:nocodb:0.11.44
-
cpe:2.3:a:xgenecloud:nocodb:0.11.45
-
cpe:2.3:a:xgenecloud:nocodb:0.11.46
-
cpe:2.3:a:xgenecloud:nocodb:0.11.5
-
cpe:2.3:a:xgenecloud:nocodb:0.11.6
-
cpe:2.3:a:xgenecloud:nocodb:0.11.7
-
cpe:2.3:a:xgenecloud:nocodb:0.11.8
-
cpe:2.3:a:xgenecloud:nocodb:0.11.9
-
cpe:2.3:a:xgenecloud:nocodb:0.80.0
-
cpe:2.3:a:xgenecloud:nocodb:0.81.0
-
cpe:2.3:a:xgenecloud:nocodb:0.81.1
-
cpe:2.3:a:xgenecloud:nocodb:0.82.0
-
cpe:2.3:a:xgenecloud:nocodb:0.83.0
-
cpe:2.3:a:xgenecloud:nocodb:0.83.1
-
cpe:2.3:a:xgenecloud:nocodb:0.83.2
-
cpe:2.3:a:xgenecloud:nocodb:0.83.3
-
cpe:2.3:a:xgenecloud:nocodb:0.83.4
-
cpe:2.3:a:xgenecloud:nocodb:0.83.5
-
cpe:2.3:a:xgenecloud:nocodb:0.83.6
-
cpe:2.3:a:xgenecloud:nocodb:0.83.8
-
cpe:2.3:a:xgenecloud:nocodb:0.9
-
cpe:2.3:a:xgenecloud:nocodb:0.9.41