CVE-2022-3423 HIGH

CVE-2022-3423: Allocation of Resources Without Limits or Throttling in nocodb/nocodb

Vendor Nocodb
Product nocodb/nocodb
Weakness CWE-770 · Uncontrolled resource consumption
Published October 7, 2022
Last update August 3, 2024

CVSS base score

7.3/10
Attack vector Local
Attack complexity Low
Privileges required Low
User interaction Required
Confidentiality Low
Integrity Low

CVSS vector

CVSS:3.1/AV:L/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:H

What the vulnerability does

01Description

Allocation of Resources Without Limits or Throttling in GitHub repository nocodb/nocodb prior to 0.92.0.

Key dates

02Disclosure timeline

October 7, 2022 CVE published
August 3, 2024 Record updated