admin/cve
1
0
Fork 0
mirror of https://github.com/0xMarcio/cve.git synced 2025-06-01 11:10:36 +00:00
Code Issues Packages Projects Releases Wiki Activity
cve/2022/CVE-2022-22120.md
0xMarcio 48a00929ac Removed duplicates
2024-06-18 02:51:15 +02:00

896 B
Raw Blame History

CVE-2022-22120

Description

In NocoDB, versions 0.9 to 0.83.8 are vulnerable to Observable Discrepancy in the password-reset feature. When requesting a password reset for a given email address, the application displays an error message when the email isn't registered within the system. This allows attackers to enumerate the registered users' email addresses.

POC

Reference

Github

No PoCs found on GitHub currently.