CVE-2022-2022: Cross-site Scripting (XSS) - Stored in nocodb/nocodb
Published Jun 7, 2022
·Updated
Cross-site Scripting (XSS) - Stored in GitHub repository nocodb/nocodb prior to 0.91.7.
Affected Software
2 affected components
Xgenecloud Nocodb<0.91.7
NocoDB NocoDB<0.91.7
Remediation
Event History
Jun 7, 2022
CVE Published
via MITRE·05:50 PM
Data Sourced
via MITRE·05:50 PM
DescriptionSeverityWeakness
Data Sourced
via NVD·08:15 PM
RemedyDescriptionSeverityWeaknessAffected Software
Frequently Asked Questions
1
What is the vulnerability ID for this vulnerability?
The vulnerability ID for this vulnerability is CVE-2022-2022.
2
What is the severity of CVE-2022-2022?
The severity of CVE-2022-2022 is critical with a severity value of 5.4.
3
What software versions are affected by CVE-2022-2022?
The software versions affected by CVE-2022-2022 are Nocodb prior to 0.91.7.
4
What is the CWE ID for CVE-2022-2022?
The CWE ID for CVE-2022-2022 is CWE-79.
5
How do I fix CVE-2022-2022?
To fix CVE-2022-2022, update Nocodb to version 0.91.7 or later.