CVE-2022-2339: Server-Side Request Forgery (SSRF) in nocodb/nocodb
Published Jul 7, 2022
·Updated
With this SSRF vulnerability, an attacker can reach internal addresses to make a request as the server and read it's contents. This attack can lead to leak of sensitive information.
Affected Software
2 affected components
Xgenecloud Nocodb<0.92.0
NocoDB NocoDB<0.92.0
Remediation
Event History
Jul 7, 2022
CVE Published
via MITRE·03:15 AM
Data Sourced
via MITRE·03:15 AM
DescriptionSeverityWeakness
Data Sourced
via NVD·04:15 AM
RemedyDescriptionSeverityWeaknessAffected Software
Frequently Asked Questions
1
What is CVE-2022-2339?
CVE-2022-2339 is a SSRF vulnerability that allows an attacker to reach internal addresses and make requests as the server.
2
How does CVE-2022-2339 work?
CVE-2022-2339 works by exploiting an SSRF vulnerability, allowing an attacker to send requests to internal addresses and read their contents.
3
What is the severity of CVE-2022-2339?
CVE-2022-2339 has a severity level of 7.5 (Critical).
4
Which software versions are affected by CVE-2022-2339?
CVE-2022-2339 affects Xgenecloud Nocodb versions up to 0.92.0.
5
How can CVE-2022-2339 be fixed?
To fix CVE-2022-2339, it is recommended to update to a version of Xgenecloud Nocodb that is above 0.92.0.