nocodb@0.91.8 vulnerabilities
NocoDB Backend
-
latest version
0.207.0
-
latest non vulnerable version
-
first published
3 years ago
-
latest version published
7 days ago
-
licenses detected
- >=0.1.29
Direct Vulnerabilities
Known vulnerabilities in the nocodb package. This does not include vulnerabilities belonging to this package’s dependencies.
Automatically find and fix vulnerabilities affecting your projects. Snyk scans for vulnerabilities and provides fixes for free.Vulnerability | Vulnerable Version |
---|---|
nocodb is a NocoDB Affected versions of this package are vulnerable to SQL Injection via the Note: This is only exploitable if the attacker has creator permissions. How to fix SQL Injection? Upgrade |
<0.111.0
|
nocodb is a NocoDB Affected versions of this package are vulnerable to Improper Input Validation via the How to fix Improper Input Validation? Upgrade |
<0.96.0
|
nocodb is a NocoDB Affected versions of this package are vulnerable to Directory Traversal allowing an unauthenticated attacker to access arbitrary files on the server by manipulating the path parameter of the How to fix Directory Traversal? Upgrade |
<0.109.6
|
nocodb is a NocoDB Affected versions of this package are vulnerable to Denial of Service (DoS) due to allowing large characters to be inserted in the input field How to fix Denial of Service (DoS)? Upgrade |
<0.92.0
|
nocodb is a NocoDB Affected versions of this package are vulnerable to Server-side Request Forgery (SSRF) due to improper validation when importing CSV or Excel files via URL. Using this option, exploitation is possible by crafting the How to fix Server-side Request Forgery (SSRF)? Upgrade |
<0.92.0
|
nocodb is a NocoDB Affected versions of this package are vulnerable to Cross-site Scripting (XSS) due to an improper sanitization of comment data. How to fix Cross-site Scripting (XSS)? Upgrade |
<0.91.9
|