Improper Input Validation in nocodb

Description

References

• nvd.nist.gov/vuln/detail/CVE-2023-5104 · ADVISORY
• nocodb/nocodb commit db0385c · WEB
• nocodb/nocodb · PACKAGE
• huntr.dev/bounties/1b5c6d9f-941e-4dd7-a964-42b53d6826b0 · WEB

nocodb의 다른 취약점

• CVE-2026-28401보통 5.4NocoDB is software for building databases as spreadsheets. Prior to version 0.301.3, rich text cell content rendered via v-html without sani…
• CVE-2026-28399높음 8.8NocoDB is software for building databases as spreadsheets. Prior to version 0.301.3, an authenticated user with Creator role can inject arbi…
• CVE-2026-28398보통 5.4NocoDB is software for building databases as spreadsheets. Prior to version 0.301.3, user-controlled content in comments and rich text cells…
• CVE-2026-28397보통 5.4NocoDB is software for building databases as spreadsheets. Prior to version 0.301.3, comments rendered via v-html without sanitization enabl…
• CVE-2026-28396보통 6.5NocoDB is software for building databases as spreadsheets. Prior to version 0.301.3, the password reset flow did not revoke existing refresh…