CVE-2023-50718
CVE-2023-50718 · NocoDB SQL Injection vulnerability
Esta página presenta datos de fuentes públicas de vulnerabilidades. Consulta el aviso original antes de actualizar.
NocoDB is software for building databases as spreadsheets. Prior to version 0.202.10, an authenticated attacker with create access could conduct a SQL Injection attack on MySQL DB using unescaped `table_name`. This vulnerability may result in leakage of sensitive data in the database. Version 0.202.10 contains a patch for the issue.
CVSS 6.5 · Media · EPSS 0,7% · Corrección disponible
- Publicación
- Actualización
Pila tecnológica: node