CVE-2026-28397
NocoDB: Stored Cross-Site Scripting via Comments
Résumé
NocoDB: Stored Cross-Site Scripting via Comments
Description d'origine
La description telle que publiée par la source (souvent en anglais).
NocoDB is software for building databases as spreadsheets. Prior to version 0.301.3, comments rendered via v-html without sanitization enable stored XSS. This issue has been patched in version 0.301.3.
Source: OSV.dev (Open Source Vulnerabilities) NVD GitHub Advisory OSV
Références
- advisory github.com
- advisory github.com
- advisory nvd.nist.gov
- web github.com