logo

Database

Insecure session expiration time In nocodb

Description

Insufficient Session Expiration in NocoDB Insufficient Session Expiration in GitHub repository nocodb/nocodb prior to 0.91.9.

Mitigation

Update Impact

Minimal update. May introduce new vulnerabilities or breaking changes.

Ecosystem
Package
Affected version
Patched versions

Aliases

1. CVE-2022-20642. NVD-2022-20643. OSV-2022-20644. GCVE-2022-2064

References

1. https://github.com/nocodb/nocodb/pull/22622. https://github.com/nocodb/nocodb/pull/23383. https://github.com/nocodb/nocodb/commit/c9b5111b25aea2781e19395a8e9107ddbd235a2b4. https://github.com/nocodb/nocodb/releases/tag/0.91.95. https://huntr.dev/bounties/39523d51-fc5c-48b8-a082-171da79761bb

Does your application use this vulnerable software?

During the free trial, our tools assess your application, identify vulnerabilities, and provide recommendations for their remediation.