Vulnerabilities

TI-2022-01911 CVE-2022-2064 · GHSA-6293-2vg2-pmp5

Insufficient Session Expiration in nocodb/nocodb

MEDIUM 41

Insufficient Session Expiration in GitHub repository nocodb/nocodb prior to 0.91.7+.

CVSS 3.1HIGH 8.8 Network Low privileges No interaction EPSS 0.01243 Published 2022-06-13 Fixed in 0.91.7+, 0.91.9 CWE-613

TI-2022-01910 CVE-2022-2063 · GHSA-fq4h-m3c8-8m2v

MEDIUM 41

Improper Privilege Management in GitHub repository nocodb/nocodb prior to 0.91.7+.

CVSS 3.1HIGH 8.8 Network No auth User interaction EPSS 0.01393 Published 2022-06-13 Fixed in 0.91.7+, 0.91.8 CWE-269

TI-2022-01909 CVE-2022-2062 · GHSA-mx8q-jqwm-85mv

LOW 36

Generation of Error Message Containing Sensitive Information in GitHub repository nocodb/nocodb prior to 0.91.7+.

CVSS 3.1HIGH 7.5 Network No auth No interaction EPSS 0.01499 Published 2022-06-13 Fixed in 0.91.7+, 0.91.7 CWE-209