← back
CVE-2022-2339

Server-Side Request Forgery (SSRF) in nocodb/nocodb

CVSS 9.1 CRITICALEPSS 1.5%CWE-918
With this SSRF vulnerability, an attacker can reach internal addresses to make a request as the server and read it's contents. This attack can lead to leak of sensitive information.
CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:H
Affected products
nocodb · nocodb/nocodb

Want to know if your infrastructure is exposed to this?

Talk to TrueHacking →