CVE-2026-47381 : 상세 정보

CVE-2026-47381

2026-06-23
21h16 +00:00
A07-Identif. and Authent. Fail
2026-06-25
14h21 +00:00
특정 CVE 알림
특정 CVE의 변경 사항에 대한 정보를 받아보세요.
알림 관리

CVE 설명

NocoDB is software for building databases as spreadsheets. Prior to 2026.05.1, a user in one workspace could exercise another workspace's integration through the testConnection endpoint by supplying its ID, because the integration was fetched in a bypass scope and the caller's permission check matched any base in any workspace. This vulnerability is fixed in 2026.05.1.

CVE 정보

관련 약점

CWE-ID 약점 이름 출처
CWE-290 Authentication Bypass by Spoofing
This attack-focused weakness is caused by incorrectly implemented authentication schemes that are subject to spoofing attacks.

참고 자료