CVE-2026-47380
2026-06-23
21h16 +00:00
21h16 +00:00
指定 CVE 通知
随时了解指定 CVE 的变更。
CVE 描述
NocoDB is software for building databases as spreadsheets. Prior to 2026.04.1, sign-in response timing differed between known and unknown email addresses because the unknown-user branch returned without performing a password hash comparison. This vulnerability is fixed in 2026.04.1.
CVE 信息
相关弱点
| 弱点名称 | 来源 | |
|---|---|---|
| Observable Timing Discrepancy Two separate operations in a product require different amounts of time to complete, in a way that is observable to an actor and reveals security-relevant information about the state of the product, such as whether a particular operation was successful or not. |
||
| Improper Restriction of Excessive Authentication Attempts The product does not implement sufficient measures to prevent multiple failed authentication attempts within a short time frame. |
