Lucene search
+L

1 matches found

Github Security Blog
Github Security Blog
added 2026/06/05 4:3 p.m.24 views

NocoDB: Plaintext Password Comparison in Shared Views

Summary The shared-view password check fell back to strict-equality === comparison for legacy plaintext passwords, leaking the password's length and per-character prefix through response timing. Details The bcrypt branch hashes starting with $2a$/$2b$ was unaffected. The legacy fallback in View.t...

6.9CVSS5.5AI score0.00253EPSS
SaveExploits0References4Affected Software1
Rows per page
Query Builder