1 matches found
CVE-2026-47382: Server-Side Request Forgery (SSRF)
NocoDB is software for building databases as spreadsheets. Prior to 2026.05.1, the connection-test endpoint opened a raw TCP socket to the user-supplied database host without resolving and range-checking the destination, so private and link-local addresses including IPv4-mapped IPv6 forms and...
5.3CVSS5.9AI score0.00351EPSS
SaveExploits0References2
20