high7.5
CVE-2022-2339
With this SSRF vulnerability, an attacker can reach internal addresses to make a request as the server and read it's contents.
Impact
With this SSRF vulnerability, an attacker can reach internal addresses to make a request as the server and read it's contents. This attack can lead to leak of sensitive information.
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Nocodb | Nocodb | before 0.92.0 |
Weakness classification
References
- NVD record
- CVE.org record
- https://github.com/nocodb/nocodb/commit/000ecd886738b965b5997cd905825e3244f48b95
- https://huntr.dev/bounties/fff06de8-2a82-49b1-8e81-968731e87eef
- https://github.com/nocodb/nocodb/commit/000ecd886738b965b5997cd905825e3244f48b95
- https://huntr.dev/bounties/fff06de8-2a82-49b1-8e81-968731e87eef