Описание
NocoDB is software for building databases as spreadsheets. Prior to version 0.301.3, the password forgot endpoint returned different responses for registered and unregistered emails, allowing user enumeration. This issue has been patched in version 0.301.3.
Ссылки
- ProductRelease Notes
- Vendor Advisory
Уязвимые конфигурации
Конфигурация 1Версия до 0.301.3 (исключая)
cpe:2.3:a:nocodb:nocodb:*:*:*:*:*:*:*:*
EPSS
Процентиль: 46%
0.00601
Низкий
5.3 Medium
CVSS3
Дефекты
CWE-204
Связанные уязвимости
github
6 месяцев назад
NocoDB Vulnerable to User Enumeration via Password Reset Endpoint
EPSS
Процентиль: 46%
0.00601
Низкий
5.3 Medium
CVSS3
Дефекты
CWE-204