CVE-2026-47381
CVE-2026-47381 · NocoDB: Cross-Workspace Integration Use in Connection Test
Cette page présente des faits issus de sources publiques. Consultez l’avis original avant toute mise à jour.
NocoDB is software for building databases as spreadsheets. Prior to 2026.05.1, a user in one workspace could exercise another workspace's integration through the testConnection endpoint by supplying its ID, because the integration was fetched in a bypass scope and the caller's permission check matched any base in any workspace. This vulnerability is fixed in 2026.05.1.
CVSS 6.9 · Moyenne · EPSS 0,4% · Correctif disponible
- Publication
- Mise à jour
Pile logicielle: node