high7.3
CVE-2022-3423
NocoDB vulnerable to Denial of Service
Impact
NocoDB prior to 0.92.0 allows actors to insert large characters into the input field `New Project` on the create field, which can cause a Denial of Service (DoS) via a crafted HTTP request. Version 0.92.0 fixes this issue.
Affected packages
| Ecosystem | Package | Affected | Fixed in |
|---|---|---|---|
| npm | nocodb | < 0.92.0 | 0.92.0 |
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Nocodb | Nocodb | before 0.92.0 |