Beveiligingsadvies

CVE-2026-53930

CVE-kwetsbaarheidsdetails - eXtreme Datacenter Security Operations

Gepubliceerd 2026-06-23 19:42:46
Laatst bijgewerkt 2026-06-24 13:38:42
Toegewezen door GitHub_M
CVSS-score 5.1
Status PUBLISHED

Beschrijving

NocoDB is software for building databases as spreadsheets. Prior to 2026.05.1, the base-migration endpoint accepted a caller-supplied URL that the migration worker dereferenced without enforcing protocol or destination, allowing scheme abuse (file:, ftp:, etc.) and probing of internal HTTP destinations. This vulnerability is fixed in 2026.05.1.