CVE-2026-28360

Katalog CVE

CVSS 5.3 · Medium EPSS 0,34%

Kerentanan Plaintext Storage of a Password pada nocodb. Skor CVSS 3.1 5.3 (Medium) menurut NVD.

Deskripsi (NVD)

NocoDB is software for building databases as spreadsheets. Prior to version 0.301.3, shared view passwords were stored in plaintext in the database and compared using direct string equality. This issue has been patched in version 0.301.3.

Rincian

Terbit di NVD

2 Maret 2026

Terakhir diubah

17 Juni 2026

Status NVD

Analyzed

CVSS 3.1

5.3 (Medium), sumber NVD
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N · uraikan di kalkulator

Jenis kelemahan (CWE)

CWE-256: Plaintext Storage of a Password

EPSS (30 hari)

0,34% peluang dieksploitasi; lebih tinggi dari 25,3% CVE lain

Produk dan versi terdampak

> Data dari konfigurasi CPE di NVD.

Referensi dan perbaikan

• https://github.com/nocodb/nocodb/security/advisories/GHSA-mpp2-x7wv-38hv advisory vendor
• https://github.com/nocodb/nocodb/releases/tag/0.301.3 product · release notes