CVE-2022-22120 — NocoDB - Observable Discrepancy in the password-reset feature
In NocoDB, versions 0.9 to 0.83.8 are vulnerable to Observable Discrepancy in the password-reset feature. When requesting a password reset for a given email address, the applica…
Published: 2022-01-10 · CVSS: 5.3 · CVSS 3.1
In NocoDB, versions 0.9 to 0.83.8 are vulnerable to Observable Discrepancy in the password-reset feature. When requesting a password reset for a given email address, the application displays an error message when the email isn't registered within the system. This allows attackers to enumerate the registered users' email addresses.
Source: CVE Program · Revision 8b16575c39f1e1810c5e863010da073d2d3285e7