Improper Input Validation in nocodb

概要

参考情報

• nvd.nist.gov/vuln/detail/CVE-2023-5104 · ADVISORY
• nocodb/nocodb commit db0385c · WEB
• nocodb/nocodb · PACKAGE
• huntr.dev/bounties/1b5c6d9f-941e-4dd7-a964-42b53d6826b0 · WEB

nocodb のその他の脆弱性

• CVE-2026-28401中 5.4NocoDB is software for building databases as spreadsheets. Prior to version 0.301.3, rich text cell content rendered via v-html without sani…
• CVE-2026-28399高 8.8NocoDB is software for building databases as spreadsheets. Prior to version 0.301.3, an authenticated user with Creator role can inject arbi…
• CVE-2026-28398中 5.4NocoDB is software for building databases as spreadsheets. Prior to version 0.301.3, user-controlled content in comments and rich text cells…
• CVE-2026-28397中 5.4NocoDB is software for building databases as spreadsheets. Prior to version 0.301.3, comments rendered via v-html without sanitization enabl…
• CVE-2026-28396中 6.5NocoDB is software for building databases as spreadsheets. Prior to version 0.301.3, the password reset flow did not revoke existing refresh…