CVE-2022-2079: Cross-site Scripting (XSS) - Stored in nocodb/nocodb
Published Jun 14, 2022
·Updated
Cross-site Scripting (XSS) - Stored in GitHub repository nocodb/nocodb prior to 0.91.7+.
Affected Software
2 affected components
Xgenecloud Nocodb<0.91.7
NocoDB NocoDB<0.91.7
Remediation
Event History
Jun 14, 2022
CVE Published
via MITRE·08:40 AM
Data Sourced
via MITRE·08:40 AM
DescriptionSeverityWeakness
Data Sourced
via NVD·09:15 AM
RemedyDescriptionSeverityWeaknessAffected Software
Frequently Asked Questions
1
What is the severity of CVE-2022-2079?
The severity of CVE-2022-2079 is high with a CVSS score of 5.4.
2
How does CVE-2022-2079 affect the affected software?
CVE-2022-2079 affects the Nocodb software prior to version 0.91.7.
3
What is the CWE ID of CVE-2022-2079?
The CWE ID of CVE-2022-2079 is 79.
4
How do I fix CVE-2022-2079?
To fix CVE-2022-2079, update Nocodb to version 0.91.7 or later.
5
Where can I find more information about CVE-2022-2079?
More information about CVE-2022-2079 can be found at the following references: [1](https://github.com/nocodb/nocodb/commit/362f8f0869989bc13bdcd66c6fc9c86ac79b9992), [2](https://huntr.dev/bounties/2615adf2-ff40-4623-97fb-2e4a3800202a)