nocodb vulnerabilities (npm)
54 vulnerabilities.
-
nocodbnpm NocoDB: Server-Side Request Forgery via Spreadsheet Import Endpoint 6.9 Medium -
nocodbnpm NocoDB: Server-Side Request Forgery via Base Migration URL 5.1 Medium -
nocodbnpm NocoDB: Stored Cross-Site Scripting via Secure Attachment 5.1 Medium -
nocodbnpm NocoDB: Refresh Tokens Persist Through Password Recovery 6.3 Medium -
nocodbnpm NocoDB: Server-Side Request Forgery via Spreadsheet Fetch URL 5.1 Medium -
nocodbnpm NocoDB: OAuth Tokens Persist Through Security Events 6.3 Medium -
nocodbnpm NocoDB: Missing Ownership Check in MCP Attachment Read 2.3 Low -
nocodbnpm NocoDB: Stored Cross-Site Scripting via Form View Redirect URL 8.4 High -
nocodbnpm NocoDB: OAuth Authorization Code Race Condition 6.3 Medium -
nocodbnpm NocoDB: Path Traversal via SQLite Source Filename 5.3 Medium -
nocodbnpm NocoDB: SQL Injection via Column Title in Bulk GroupBy 5.3 Medium -
nocodbnpm NocoDB: Stored Cross-Site Scripting via Row Comments 7.4 High -
nocodbnpm NocoDB: Server-Side Request Forgery via Database Connection Host 5.3 Medium -
nocodbnpm NocoDB: Cross-Workspace Integration Use in Connection Test 6.9 Medium -
nocodbnpm NocoDB: User Enumeration via Sign-In Timing 6.3 Medium -
nocodbnpm NocoDB: Plaintext Password Comparison in Shared Views 6.9 Medium -
nocodbnpm NocoDB: Hidden Column Exposure in Public Shared View Endpoints 6.9 Medium -
nocodbnpm NocoDB: Open Redirect via Hash Fragment in hashRedirect Plugin 5.1 Medium -
nocodbnpm NocoDB: Reflected Cross-Site Scripting via Password Reset Token 5.1 Medium -
nocodbnpm NocoDB: Postgres SQL Injection in Formula `ARRAYSORT` 6.0 Medium -
nocodbnpm NocoDB: Hidden LTAR Column Exposure in Public Shared-View Relation Endpoints 6.9 Medium -
nocodbnpm NocoDB: Stale Auth Cache After API Token Deletion 2.3 Low -
nocodbnpm NocoDB: Attachment Size Limit Bypass via Upload-by-URL 2.1 Low -
nocodbnpm NocoDB: Shared-base link access can invite arbitrary users as persistent base members 5.8 Medium -
nocodbnpm NocoDB: Missing File Size Enforcement in Upload-by-URL Allows Denial of Service via Disk Exhaustion 6.5 Medium -
nocodbnpm NocoDB: Refresh Token Cookie Set Without `Secure` and `SameSite` Flags 5.4 Medium -
nocodbnpm NocoDB: OAuth Token Scope Not Enforced at ACL Layer Allows Scope Escalation 2.0 Low -
nocodbnpm NocoDB: SSRF Protection Bypass in Notification Webhook Plugins (Slack, Discord, Mattermost, Teams) 4.3 Medium -
nocodbnpm NocoDB: Reflected Cross-Site Scripting via Page Leaving Redirect URL 6.1 Medium -
nocodbnpm NocoDB: Stored Cross-Site Scripting via Rich Text Cells 5.3 Medium -
nocodbnpm NocoDB: SQL Injection via DATEADD Formula 6.2 Medium -
nocodbnpm NocoDB: Stored Cross-Site Scripting via Comments and Rich Text Cells 5.3 Medium -
nocodbnpm NocoDB: Stored Cross-Site Scripting via Comments 5.3 Medium -
nocodbnpm NocoDB: Refresh Tokens Not Revoked on Password Reset 4.9 Medium -
nocodbnpm NocoDB: Missing Ownership Validation in MCP Token Operations 4.9 Medium -
nocodbnpm NocoDB: Plaintext Storage of Shared View Passwords 2.7 Low -
nocodbnpm NocoDB: Stored Cross-Site Scripting via Rich Text Field 5.3 Medium -
nocodbnpm NocoDB: User Enumeration via Password Reset Endpoint 2.7 Low -
nocodbnpm NocoDB: Stored Cross-Site Scripting via Formula Cell 5.3 Medium -
nocodbnpm NocoDB Vulnerable to Stored Cross-Site Scripting via SVG upload 8.5 High -
nocodbnpm NocoDB has Unvalidated Redirect in Login Flow via continueAfterSignIn Parameter 5.7 Medium -
nocodbnpm NocoDB has Blind SSRF via Unvalidated HEAD Request in uploadViaURL Functionality 4.9 Medium -
nocodbnpm NocoDB Vulnerable to Prototype Pollution in Connection Test Endpoint, Leading to DoS 4.9 Medium -
nocodbnpm NocoDB Vulnerable to Reflected Cross-Site Scripting on Reset Password Page 5.4 Medium -
nocodbnpm NocoDB Vulnerable to Stored Cross-Site Scripting in Formula.vue 7.3 High -
nocodbnpm NocoDB SQL Injection vulnerability 6.5 Medium -
nocodbnpm NocoDB Allows Preview of File with Dangerous Content 5.7 Medium -
nocodbnpm SQL Injection in nocodb 6.5 Medium -
nocodbnpm Improper Input Validation in nocodb/nocodb 5.7 Medium -
nocodbnpm Allocation of Resources Without Limits or Throttling in nocodb/nocodb 7.3 High - Show olderLoading…