CVE-2023-5104

CVE-2023-5104 affects nocodb/nocodb (GitHub repository) and is due to improper input validation in the project prior to version 0.96.0. Reported across multiple feeds (NVD, Red Hat, GHSA, OSV, etc.), the vulnerability targets the input validation layer and leads to a high availability impact in s...

CVE-2023-5104 Improper Input Validation in nocodb/nocodb

Improper Input Validation in GitHub repository nocodb/nocodb prior to 0.96.0...

NocoDB Input Validation Error Vulnerability

NocoDB is an open source Airtable replacement. Convert any MySql, PostgreSql, Sql Server, Sqlite and MariaDb into a smart spreadsheet. An input validation error vulnerability exists in nocodb that stems from incorrect input validation...

PT-2023-31747 · Nocodb · Nocodb

Name of the Vulnerable Software and Affected Versions: nocodb/nocodb versions prior to 0.96.0 Description: The issue is related to improper input validation in the GitHub repository nocodb/nocodb. Recommendations: For versions prior to 0.96.0, update to version 0.96.0 or later to resolve the issu...

Directory Traversal

nocodb is vulnerable to Directory Traversal. The vulnerability exists in the fileRead function of attachments.controller.ts and attachment.ctl.ts files, which allows an attacker to fetch arbitrary files on the server by manipulating the path parameter of the /download route, resulting in the...

CVE-2023-35843

NocoDB through 0.106.0 or 0.109.1 has a path traversal vulnerability that allows an unauthenticated attacker to access arbitrary files on the server by manipulating the path parameter of the /download route. This vulnerability could allow an attacker to access sensitive files and data on the...

CVE-2023-35843

NocoDB through 0.106.0 or 0.109.1 has a path traversal vulnerability that allows an unauthenticated attacker to access arbitrary files on the server by manipulating the path parameter of the /download route. This vulnerability could allow an attacker to access sensitive files and data on the...

Path traversal

NocoDB through 0.106.0 or 0.109.1 has a path traversal vulnerability that allows an unauthenticated attacker to access arbitrary files on the server by manipulating the path parameter of the /download route. This vulnerability could allow an attacker to access sensitive files and data on the...

CVE-2023-35843

NocoDB is affected by a path traversal vulnerability affecting versions up to 0.106.0 (and in some references up to 0.109.1). An unauthenticated attacker can access arbitrary server files by manipulating the path parameter of the /download route, potentially exposing configuration files, source c...

NocoDB 路径遍历漏洞

NocoDB is an open source Airtable replacement. Convert any MySql, PostgreSql, Sql Server, Sqlite and MariaDb into a smart spreadsheet. A security vulnerability exists in NocoDB version 0.106.0 and earlier versions. An attacker can exploit the vulnerability to access arbitrary files on the server...

CVE-2023-35843

NocoDB through 0.106.0 or 0.109.1 has a path traversal vulnerability that allows an unauthenticated attacker to access arbitrary files on the server by manipulating the path parameter of the /download route. This vulnerability could allow an attacker to access sensitive files and data on the...

CVE-2023-35843

NocoDB through 0.106.0 or 0.109.1 has a path traversal vulnerability that allows an unauthenticated attacker to access arbitrary files on the server by manipulating the path parameter of the /download route. This vulnerability could allow an attacker to access sensitive files and data on the...

NocoDB Resource Management Error Vulnerability

NocoDB is an open source Airtable replacement. A resource management error vulnerability exists in versions of NocoDB prior to 0.92.0, which stems from allowing the insertion of large characters into the input field "New Project" in the creation field. ", an attacker could use this vulnerability ...

GHSA-GRV6-M753-3W2G NocoDB vulnerable to Denial of Service

NocoDB prior to 0.92.0 allows actors to insert large characters into the input field New Project on the create field, which can cause a Denial of Service DoS via a crafted HTTP request. Version 0.92.0 fixes this issue...

NocoDB vulnerable to Denial of Service

NocoDB prior to 0.92.0 allows actors to insert large characters into the input field New Project on the create field, which can cause a Denial of Service DoS via a crafted HTTP request. Version 0.92.0 fixes this issue...

CVE-2022-3423

Allocation of Resources Without Limits or Throttling in GitHub repository nocodb/nocodb prior to 0.92.0...

CVE-2022-3423

Allocation of Resources Without Limits or Throttling in GitHub repository nocodb/nocodb prior to 0.92.0...

Design/Logic Flaw

Allocation of Resources Without Limits or Throttling in GitHub repository nocodb/nocodb prior to 0.92.0...

PT-2022-22086 · Nocodb · Nocodb

Name of the Vulnerable Software and Affected Versions: NocoDB versions prior to 0.92.0 Description: The issue allows actors to cause a Denial of Service DoS by inserting large characters into the input field New Project on the create field via a crafted HTTP request. Recommendations: For versions...

CVE-2022-3423

CVE-2022-3423 affects NocoDB prior to version 0.92.0. The issue is a resource management flaw described as Allocation of Resources Without Limits or Throttling, allowing a crafted HTTP request to insert large characters into the input field for creating a new project, which can trigger a Denial o...