HIGH 7.5

GHSA-mx8q-jqwm-85mv

NocoDB information disclosure vulnerability

상세

In NocoDB prior to 0.91.7, the SMTP plugin doesn't have verification or validation. This allows attackers to make requests to internal servers and read the contents.

이 버전이 영향받나요?

사용 중인 패키지 버전을 입력하면 즉시 평가합니다.

영향 패키지

npm / nocodb

최초 영향 버전: 0 수정 버전: 0.91.7

수정 npm install nocodb@0.91.7

참고

https://nvd.nist.gov/vuln/detail/CVE-2022-2062 [ADVISORY]
https://github.com/nocodb/nocodb/commit/a18f5dd53811b9ec1c1bb2fdbfb328c0c87d7fb4 [WEB]
https://github.com/nocodb/nocodb [PACKAGE]
https://huntr.dev/bounties/35593b4c-f127-4699-8ad3-f0b2203a8ef6 [WEB]