GCVE - cpe:2.3:a:nocodb:nocodb/nocodb:*:*:*:*:*:*:*:*

Approved changes feed: RSS · Atom

cpe:2.3:a:nocodb:nocodb/nocodb:*:*:*:*:*:*:*:*

part: a version: * update: *

Vendor	Nocodb (`dfada5e4-727b-5e0a-bb13-cc8ae1b1071b`)
Product	Nocodb/Nocodb (`c830d16a-ec62-5b8e-b350-20d2c7d4ad61`)
Edition	*
Language	*
Software edition	*
Target software	*
Target hardware	*
Other	*
Notes	Imported from gcve-enriched-dumps CVE data

PURL mappings

PURL	Source	Last updated
No PURL mappings for this CPE yet.

Vulnerability references

Identifier	cpeApplicability	Submitted	db.gcve.eu details	Rationale
`CVE:CVE-2023-5104`	vulnerable	2026-06-08 06:19:41.490533	Improper Input Validation in nocodb/nocodb MEDIUM (5.7) Improper Input Validation in GitHub repository nocodb/nocodb prior to 0.96.0. Published: 2023-09-21T08:44:16.801Z Updated: 2024-09-24T16:37:13.074Z Open on db.gcve.eu Reference links https://huntr.dev/bounties/1b5c6d9f-941e-4dd7-a964-42b53d6826b0 https://github.com/nocodb/nocodb/commit/db0385cb8aab2a34e233454607f59152ac62b3e2	Imported from gcve-enriched-dumps CVE data
`CVE:CVE-2022-3423`	vulnerable	2026-06-08 05:48:20.908114	Allocation of Resources Without Limits or Throttling in nocodb/nocodb HIGH (7.3) Allocation of Resources Without Limits or Throttling in GitHub repository nocodb/nocodb prior to 0.92.0. Published: 2022-10-07T00:00:00.000Z Updated: 2024-08-03T01:07:06.706Z Open on db.gcve.eu Reference links https://github.com/nocodb/nocodb/commit/000ecd886738b965b5997cd905825e3244f48b95 https://huntr.dev/bounties/94639d8e-8301-4432-ab80-e76e1346e631	Imported from gcve-enriched-dumps CVE data
`CVE:CVE-2022-2339`	vulnerable	2026-06-08 05:43:35.354281	Server-Side Request Forgery (SSRF) in nocodb/nocodb CRITICAL (9.1) With this SSRF vulnerability, an attacker can reach internal addresses to make a request as the server and read it's contents. This attack can lead to leak of sensitive information. Published: 2022-07-07T03:15:12.000Z Updated: 2024-08-03T00:32:09.612Z Open on db.gcve.eu Reference links https://huntr.dev/bounties/fff06de8-2a82-49b1-8e81-968731e87eef https://github.com/nocodb/nocodb/commit/000ecd886738b965b5997cd905825e3244f48b95	Imported from gcve-enriched-dumps CVE data
`CVE:CVE-2022-2079`	vulnerable	2026-06-08 05:42:50.219859	Cross-site Scripting (XSS) - Stored in nocodb/nocodb HIGH (7.3) Cross-site Scripting (XSS) - Stored in GitHub repository nocodb/nocodb prior to 0.91.7+. Published: 2022-06-14T08:40:10.000Z Updated: 2024-08-03T00:24:44.190Z Open on db.gcve.eu Reference links https://huntr.dev/bounties/2615adf2-ff40-4623-97fb-2e4a3800202a https://github.com/nocodb/nocodb/commit/362f8f0869989bc13bdcd66c6fc9c86ac79b9992	Imported from gcve-enriched-dumps CVE data
`CVE:CVE-2022-2064`	vulnerable	2026-06-08 05:42:50.180179	Insufficient Session Expiration in nocodb/nocodb CRITICAL (9.1) Insufficient Session Expiration in GitHub repository nocodb/nocodb prior to 0.91.7+. Published: 2022-06-13T11:45:15.000Z Updated: 2024-08-03T00:24:44.195Z Open on db.gcve.eu Reference links https://huntr.dev/bounties/39523d51-fc5c-48b8-a082-171da79761bb https://github.com/nocodb/nocodb/commit/c9b5111b25aea2781e19395a8e9107ddbd235a2b	Imported from gcve-enriched-dumps CVE data
`CVE:CVE-2022-2063`	vulnerable	2026-06-08 05:42:50.179690	db.gcve.eu details were skipped to keep the page responsive. Open on db.gcve.eu	Imported from gcve-enriched-dumps CVE data
`CVE:CVE-2022-2062`	vulnerable	2026-06-08 05:42:50.179296	db.gcve.eu details were skipped to keep the page responsive. Open on db.gcve.eu	Imported from gcve-enriched-dumps CVE data
`CVE:CVE-2022-2022`	vulnerable	2026-06-08 05:42:50.065778	db.gcve.eu details were skipped to keep the page responsive. Open on db.gcve.eu	Imported from gcve-enriched-dumps CVE data

Contribute

You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.