Beveiligingsadvies

CVE-2026-28399

CVE-kwetsbaarheidsdetails - eXtreme Datacenter Security Operations

Gepubliceerd 2026-03-02 16:19:42
Laatst bijgewerkt 2026-03-03 15:53:53
Toegewezen door GitHub_M
CVSS-score 6.2
Status PUBLISHED

Beschrijving

NocoDB is software for building databases as spreadsheets. Prior to version 0.301.3, an authenticated user with Creator role can inject arbitrary SQL via the DATEADD formula's unit parameter. This issue has been patched in version 0.301.3.