CVE-2023-43794 SQL Injection in nocodb

Nocodb is an open source Airtable alternative. Affected versions of nocodb contain a SQL injection vulnerability, that allows an authenticated attacker with creator access to query the underlying database. By supplying a specially crafted payload to the given an attacker can inject arbitrary SQL...

CVE-2023-43794 SQL Injection in nocodb

Nocodb is an open source Airtable alternative. Affected versions of nocodb contain a SQL injection vulnerability, that allows an authenticated attacker with creator access to query the underlying database. By supplying a specially crafted payload to the given an attacker can inject arbitrary SQL...

CVE-2023-43794 SQL Injection in nocodb

Nocodb is an open source Airtable alternative. Affected versions of nocodb contain a SQL injection vulnerability, that allows an authenticated attacker with creator access to query the underlying database. By supplying a specially crafted payload to the given an attacker can inject arbitrary SQL...

GHSA-3M5Q-Q39V-XF8F nocodb SQL Injection vulnerability

Summary Nocodb contains SQL injection vulnerability, that allows an authenticated attacker with creator access to query the underlying database. Product nocodb/nocodb Tested Version 0.109.2 Details SQL injection in SqliteClient.ts GHSL-2023-141 By supplying a specially crafted payload to the give...

nocodb SQL Injection vulnerability

Summary Nocodb contains SQL injection vulnerability, that allows an authenticated attacker with creator access to query the underlying database. Product nocodb/nocodb Tested Version 0.109.2 Details SQL injection in SqliteClient.ts GHSL-2023-141 By supplying a specially crafted payload to the give...

CVE-2023-43794: Improper Neutralization of Special Elements used in an SQL Command

Nocodb is an open source Airtable alternative. Affected versions of nocodb contain a SQL injection vulnerability, that allows an authenticated attacker with creator access to query the underlying database. By supplying a specially crafted payload to the given an attacker can inject arbitrary SQL...

NocoDB SQL Injection Vulnerability

NocoDB is an open source Airtable replacement. Convert any MySql, PostgreSql, Sql Server, Sqlite and MariaDb into a smart spreadsheet. A security vulnerability exists in Nocodb version 0.109.2. An attacker exploiting this vulnerability can query the underlying database...

GHSA-XRPM-HCCG-28X7 Improper Input Validation in nocodb

Improper Input Validation in GitHub repository nocodb/nocodb prior to 0.96.0...

Improper Input Validation in nocodb

Improper Input Validation in GitHub repository nocodb/nocodb prior to 0.96.0...

CVE-2023-5104

Improper Input Validation in GitHub repository nocodb/nocodb prior to 0.96.0...

Input validation

Improper Input Validation in GitHub repository nocodb/nocodb prior to 0.96.0...

CVE-2023-5104

CVE-2023-5104 affects nocodb/nocodb (GitHub repository) and is due to improper input validation in the project prior to version 0.96.0. Reported across multiple feeds (NVD, Red Hat, GHSA, OSV, etc.), the vulnerability targets the input validation layer and leads to a high availability impact in s...

CVE-2023-5104 Improper Input Validation in nocodb/nocodb

Improper Input Validation in GitHub repository nocodb/nocodb prior to 0.96.0...

PT-2023-31747 · Nocodb · Nocodb

Name of the Vulnerable Software and Affected Versions: nocodb/nocodb versions prior to 0.96.0 Description: The issue is related to improper input validation in the GitHub repository nocodb/nocodb. Recommendations: For versions prior to 0.96.0, update to version 0.96.0 or later to resolve the issu...

NocoDB Input Validation Error Vulnerability

NocoDB is an open source Airtable replacement. Convert any MySql, PostgreSql, Sql Server, Sqlite and MariaDb into a smart spreadsheet. An input validation error vulnerability exists in nocodb that stems from incorrect input validation...

CVE-2023-5104: Improper Input Validation

Improper Input Validation in GitHub repository nocodb/nocodb prior to 0.96.0...

Directory Traversal

nocodb is vulnerable to Directory Traversal. The vulnerability exists in the fileRead function of attachments.controller.ts and attachment.ctl.ts files, which allows an attacker to fetch arbitrary files on the server by manipulating the path parameter of the /download route, resulting in the...

CVE-2023-35843

NocoDB through 0.106.0 or 0.109.1 has a path traversal vulnerability that allows an unauthenticated attacker to access arbitrary files on the server by manipulating the path parameter of the /download route. This vulnerability could allow an attacker to access sensitive files and data on the...

CVE-2023-35843

NocoDB through 0.106.0 or 0.109.1 has a path traversal vulnerability that allows an unauthenticated attacker to access arbitrary files on the server by manipulating the path parameter of the /download route. This vulnerability could allow an attacker to access sensitive files and data on the...

Path traversal

NocoDB through 0.106.0 or 0.109.1 has a path traversal vulnerability that allows an unauthenticated attacker to access arbitrary files on the server by manipulating the path parameter of the /download route. This vulnerability could allow an attacker to access sensitive files and data on the...