NocoDB SQL Injection vulnerability
Summary --- An authenticated attacker with create access could conduct a SQL Injection attack on MySQL DB using unescaped tablename. Details --- SQL Injection vulnerability occurs in VitessClient.ts. javascript async columnListargs: any = const func = this.columnList.name; const result = new...