Lucene search
GoogleOSV:CVE-2022-22120HistoryJan 10, 2022 - 4:15 p.m.
CVE-2022-22120
2022-01-1016:15:10
Google
osv.dev
6
In NocoDB, versions 0.9 to 0.83.8 are vulnerable to Observable Discrepancy in the password-reset feature. When requesting a password reset for a given email address, the application displays an error message when the email isn’t registered within the system. This allows attackers to enumerate the registered users’ email addresses.
Related
nvd
nvd
CVE-2022-22120
2022-01-10 16:15:10
prion
prion
Design/Logic Flaw
2022-01-10 16:15:00
cve
cve
CVE-2022-22120
2022-01-10 16:15:10
veracode
veracode
Information Disclosure
2022-01-11 07:00:27
cvelist
cvelist
CVE-2022-22120 NocoDB - Observable Discrepancy in the password-reset feature
2022-01-09 00:00:00