VDB
KO
HIGH 7.5

GHSA-mx8q-jqwm-85mv

NocoDB information disclosure vulnerability

Details

In NocoDB prior to 0.91.7, the SMTP plugin doesn't have verification or validation. This allows attackers to make requests to internal servers and read the contents.

Are you affected?

Enter the version of the package you're using.

Affected packages

npm / nocodb
Introduced in: 0 Fixed in: 0.91.7
Fix npm install nocodb@0.91.7

References