GHSA-mx8q-jqwm-85mvHighCVSS 7.5

NocoDB information disclosure vulnerability

Published
June 14, 2022
Last Modified
June 30, 2023

🔗 CVE IDs covered (1)

CVE-2022-2062 →

📋 Description

In NocoDB prior to 0.91.7, the SMTP plugin doesn't have verification or validation. This allows attackers to make requests to internal servers and read the contents.

🎯 Affected products1

  • npm/nocodb:< 0.91.7

🔗 References (4)