Lucene search

K
osvGoogleOSV:GHSA-MX8Q-JQWM-85MV
HistoryJun 14, 2022 - 12:00 a.m.

NocoDB information disclosure vulnerability

2022-06-1400:00:37
Google
osv.dev
12
nocodb
information disclosure
vulnerability
smtp
verification
validation
attackers
internal servers
software

EPSS

0.001

Percentile

51.0%

In NocoDB prior to 0.91.7, the SMTP plugin doesn’t have verification or validation. This allows attackers to make requests to internal servers and read the contents.

EPSS

0.001

Percentile

51.0%

Related for OSV:GHSA-MX8Q-JQWM-85MV