Nocodb: >> Nocodb >> 0.11.13 Security Vulnerabilities
Insufficient Session Expiration in GitHub repository nocodb/nocodb prior to 0.91.7+.
CVSS Score
9.1
EPSS Score
0.003
Published
2022-06-13
Cross-site Scripting (XSS) - Stored in GitHub repository nocodb/nocodb prior to 0.91.7.
CVSS Score
9.0
EPSS Score
0.004
Published
2022-06-07
In NocoDB, versions 0.9 to 0.83.8 are vulnerable to Observable Discrepancy in the password-reset feature. When requesting a password reset for a given email address, the application displays an error message when the email isn't registered within the system. This allows attackers to enumerate the registered users' email addresses.
CVSS Score
5.3
EPSS Score
0.003
Published
2022-01-10
Page 2