Non évaluée
NocoDB - Observable Discrepancy in the password-reset feature
CVE-2022-22120
Première détection SecPulse
Description d'origine La description telle que publiée par la source (souvent en anglais).
In NocoDB, versions 0.9 to 0.83.8 are vulnerable to Observable Discrepancy in the password-reset feature. When requesting a password reset for a given email address, the application displays an error message when the email isn't registered within the system. This allows attackers to enumerate the registered users' email addresses.
Références
- advisory github.com
- advisory nvd.nist.gov
- patch github.com
- web whitesourcesoftware.com