CNNVD-202601-4647 Information
Jan 28, 2026
cve
CNNVD ID
CNNVD-202601-4647
Related CVE
- CNNVD Published: 2026-01-28
Description (Chinese)
NocoDB是一个开源 Airtable 替代品。将任何 MySql、PostgreSql、Sql Server、Sqlite 和 MariaDb 转换为智能电子表格。 NocoDB 0.301.0之前版本存在代码问题漏洞，该漏洞源于uploadViaURL功能存在盲服务端请求伪造，可能导致有限的出站请求。
Description (English)
NocoDB is an open-source Airtable alternative. Converts any MySql, PostgreSql, Sql Server, Sqlite and MariaDb into smart spreadsheets. There was a code gap in the pre-NocoDB version 0.301. This gap stems from the existence of blind service-level requests for forgery that could lead to limited exit requests.
Hazard Level
High
Vulnerability Type
代码问题
Affected Vendor
个人开发者
Published
2026-01-28
Last Modified
2026-02-24
References
https://github.com/nocodb/nocodb/security/advisories/GHSA-xr7v-j379-34v9 https://access.redhat.com/security/cve/cve-2026-24767
Patch
https://github.com/nocodb/nocodb/releases
Share on: