Lucene search
+L

1 matches found

Github Security Blog
Github Security Blog
added 2024/05/13 4:46 p.m.36 views

NocoDB SQL Injection vulnerability

Summary --- An authenticated attacker with create access could conduct a SQL Injection attack on MySQL DB using unescaped tablename. Details --- SQL Injection vulnerability occurs in VitessClient.ts. javascript async columnListargs: any = const func = this.columnList.name; const result = new...

6.5CVSS6.6AI score0.00696EPSS
SaveExploits1References3Affected Software1
Rows per page
Query Builder