CVE-2026-46547
CVE-2026-46547 · NocoDB: Reflected Cross-Site Scripting via Page Leaving Redirect URL
Esta página presenta datos de fuentes públicas de vulnerabilidades. Consulta el aviso original antes de actualizar.
NocoDB is software for building databases as spreadsheets. Prior to 2026.04.1, a reflected XSS vulnerability exists in the Page Leaving Warning page. The ncRedirectUrl and ncBackUrl query parameters are used in window.location.href and <a> tag bindings without validation, allowing javascript: URI injection. This vulnerability is fixed in 2026.04.1.
CVSS 6.1 · Media · EPSS 0,3%
- Publicación
- Actualización
Pila tecnológica: node