CVE-2023-35843

CVE-2023-35843 CVE-2023-35843 Arbitrary File Read Vulnerability...

CVE-2023-35843

CVE-2023-35843 NocoDB Arbitrary File Read CVE-2023-35843...

VulnCheck KEV: CVE-2023-35843

NocoDB through 0.106.0 or 0.109.1 has a path traversal vulnerability that allows an unauthenticated attacker to access arbitrary files on the server by manipulating the path parameter of the /download route. This vulnerability could allow an attacker to access sensitive files and data on the...

CVE-2023-35843

NocoDB versions through 0.106.0 (or 0.109.1 ) are vulnerable to a path traversal vulnerability in the fileRead() function. An unauthenticated attacker can manipulate the path parameter of the /download route to access arbitrary files on the server. This may lead to the exposure of sensitive data,...

CVE-2023-35843

NocoDB through 0.106.0 or 0.109.1 has a path traversal vulnerability that allows an unauthenticated attacker to access arbitrary files on the server by manipulating the path parameter of the /download route. This vulnerability could allow an attacker to access sensitive files and data on the...