6.5

CVE-2023-5104

Exploit

Improper Input Validation in nocodb/nocodb

Improper Input Validation in GitHub repository nocodb/nocodb prior to 0.96.0.
Daten sind bereitgestellt durch National Vulnerability Database (NVD)
Nocodb ≫ Nocodb Version < 0.96.0
Zu dieser CVE wurde keine Warnung gefunden.
EPSS Metriken
Typ Quelle Score Percentile
EPSS FIRST.org 0.64% 0.457
CVSS Metriken
Quelle Base Score Exploit Score Impact Score Vector String
nvd@nist.gov 6.5 2.8 3.6
CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H
security@huntr.dev 5.7 2.1 3.6
CVSS:3.0/AV:N/AC:L/PR:L/UI:R/S:U/C:N/I:N/A:H
CWE-20 Improper Input Validation

The product receives input or data, but it does not validate or incorrectly validates that the input has the properties that are required to process the data safely and correctly.

https://github.com/nocodb/nocodb/commit/db0385cb8aab2a34e233454607f59152ac62b3e2
Patch
https://huntr.dev/bounties/1b5c6d9f-941e-4dd7-a964-42b53d6826b0
Patch
Third Party Advisory
Exploit