CVE-2026-28398
NocoDB: Stored Cross-Site Scripting via Comments and Rich Text Cells
Résumé
NocoDB: Stored Cross-Site Scripting via Comments and Rich Text Cells
Description d'origine
La description telle que publiée par la source (souvent en anglais).
NocoDB is software for building databases as spreadsheets. Prior to version 0.301.3, user-controlled content in comments and rich text cells was rendered via v-html without sanitization, enabling stored XSS. This issue has been patched in version 0.301.3.
Source: OSV.dev (Open Source Vulnerabilities) NVD GitHub Advisory OSV
Références
- advisory github.com
- advisory github.com
- advisory nvd.nist.gov
- web github.com