~ / search / GHSA-mx8q-jqwm-85mv

GHSA-mx8q-jqwm-85mv

NocoDB information disclosure vulnerability

Source: GitHub Advisory Database (reviewed) High CVE-2022-2062

Packages

EcosystemPackageAffectedFixed in
npm nocodb < 0.91.7 0.91.7

Details

As written in the advisory (Markdown source, shown as plain text).

In NocoDB prior to 0.91.7, the SMTP plugin doesn't have verification or validation. This allows attackers to make requests to internal servers and read the contents.

References

External links from the advisory. They lead to third-party sites.