Beveiligingsadvies

CVE-2026-47386

CVE-kwetsbaarheidsdetails - eXtreme Datacenter Security Operations

Gepubliceerd 2026-06-23 20:12:13

Laatst bijgewerkt 2026-06-24 19:17:53

Toegewezen door GitHub_M

CVSS-score 6.3

Status PUBLISHED

Beschrijving

NocoDB is software for building databases as spreadsheets. Prior to 2026.05.1, two concurrent token-exchange requests using the same OAuth authorization code could each mint a distinct valid (access_token, refresh_token) pair, breaking the single-use guarantee that PKCE relies on. This vulnerability is fixed in 2026.05.1.

← Alle CVE's bekijken Bekijk op cve.org ↗