CVE-2022-3423

Allocation of Resources Without Limits or Throttling in nocodb/nocodb

Allocation of Resources Without Limits or Throttling in GitHub repository nocodb/nocodb prior to 0.92.0.

Affected

nocodb · nocodb/nocodb

CVSS v3.1 NVD

6.5 MEDIUMCVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H

CVSS v3.1 HUNTR

7.3 HIGHCVSS:3.1/AV:L/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:H

EPSS

2.29% chance of exploitation in the next 30 days, 83rd percentile

Published

2022-10-07

Updated

2024-08-03

Proof-of-concept exploits (1)

• https://huntr.dev/bounties/94639d8e-8301-4432-ab80-e76e1346e631

Security advisories

• nocodb/nocodb/commit/000ecd886738b965b5997cd905825e3244f48b95
• advisories/GHSA-grv6-m753-3w2g

References

• CVE Record
• NVD entry