Vulnerabilities > CVE-2022-2339 - Server-Side Request Forgery (SSRF) vulnerability in Xgenecloud Nocodb

CVSS 7.5 - HIGH

Attack vector

NETWORK

Attack complexity

LOW

Privileges required

NONE

Confidentiality impact

HIGH

Integrity impact

NONE

Availability impact

NONE

network

low complexity

xgenecloud

CWE-918

NVD

Published: 2022-07-07

Updated: 2022-07-14

Summary

With this SSRF vulnerability, an attacker can reach internal addresses to make a request as the server and read it's contents. This attack can lead to leak of sensitive information.

Vulnerable Configurations

Part	Description	Count
Application	Xgenecloud Xgenecloud Nocodb - Xgenecloud Nocodb 0.4.2 Xgenecloud Nocodb 0.4.4 Xgenecloud Nocodb 0.4.5 Xgenecloud Nocodb 0.4.8 Xgenecloud Nocodb 0.4.9 Xgenecloud Nocodb 0.9 Xgenecloud Nocodb 0.9.41 Xgenecloud Nocodb 0.10.0 Xgenecloud Nocodb 0.10.1 Xgenecloud Nocodb 0.10.2 Xgenecloud Nocodb 0.10.3 Xgenecloud Nocodb 0.10.4 Xgenecloud Nocodb 0.10.5 Xgenecloud Nocodb 0.10.6 Xgenecloud Nocodb 0.11.0 Xgenecloud Nocodb 0.11.1 Xgenecloud Nocodb 0.11.3 Xgenecloud Nocodb 0.11.4 Xgenecloud Nocodb 0.11.5 Xgenecloud Nocodb 0.11.6 Xgenecloud Nocodb 0.11.7 Xgenecloud Nocodb 0.11.8 Xgenecloud Nocodb 0.11.9 Xgenecloud Nocodb 0.11.10 Xgenecloud Nocodb 0.11.11 Xgenecloud Nocodb 0.11.12 Xgenecloud Nocodb 0.11.13 Xgenecloud Nocodb 0.11.14 Xgenecloud Nocodb 0.11.15 Xgenecloud Nocodb 0.11.16 Xgenecloud Nocodb 0.11.17 Xgenecloud Nocodb 0.11.18 Xgenecloud Nocodb 0.11.19 Xgenecloud Nocodb 0.11.20 Xgenecloud Nocodb 0.11.21 Xgenecloud Nocodb 0.11.22 Xgenecloud Nocodb 0.11.23 Xgenecloud Nocodb 0.11.24 Xgenecloud Nocodb 0.11.25 Xgenecloud Nocodb 0.11.26 Xgenecloud Nocodb 0.11.28 Xgenecloud Nocodb 0.11.29 Xgenecloud Nocodb 0.11.30 Xgenecloud Nocodb 0.11.31 Xgenecloud Nocodb 0.11.32 Xgenecloud Nocodb 0.11.33 Xgenecloud Nocodb 0.11.34 Xgenecloud Nocodb 0.11.36 Xgenecloud Nocodb 0.11.39 Xgenecloud Nocodb 0.11.40 Xgenecloud Nocodb 0.11.41 Xgenecloud Nocodb 0.11.42 Xgenecloud Nocodb 0.11.43 Xgenecloud Nocodb 0.11.44 Xgenecloud Nocodb 0.11.45 Xgenecloud Nocodb 0.11.46 Xgenecloud Nocodb 0.80.0 Xgenecloud Nocodb 0.81.0 Xgenecloud Nocodb 0.81.1 Xgenecloud Nocodb 0.82.0 Xgenecloud Nocodb 0.83.0 Xgenecloud Nocodb 0.83.1 Xgenecloud Nocodb 0.83.2 Xgenecloud Nocodb 0.83.3 Xgenecloud Nocodb 0.83.4 Xgenecloud Nocodb 0.83.5 Xgenecloud Nocodb 0.83.6 Xgenecloud Nocodb 0.83.8 Xgenecloud Nocodb 0.84.1 Xgenecloud Nocodb 0.84.2 Xgenecloud Nocodb 0.84.3 Xgenecloud Nocodb 0.84.6 Xgenecloud Nocodb 0.84.7 Xgenecloud Nocodb 0.84.8 Xgenecloud Nocodb 0.84.9 Xgenecloud Nocodb 0.84.10 Xgenecloud Nocodb 0.84.12 Xgenecloud Nocodb 0.84.13 Xgenecloud Nocodb 0.84.14 Xgenecloud Nocodb 0.84.15 Xgenecloud Nocodb 0.84.16 Xgenecloud Nocodb 0.90.0 Xgenecloud Nocodb 0.90.1 Xgenecloud Nocodb 0.90.2 Xgenecloud Nocodb 0.90.3 Xgenecloud Nocodb 0.90.4 Xgenecloud Nocodb 0.90.5 Xgenecloud Nocodb 0.90.7 Xgenecloud Nocodb 0.90.8 Xgenecloud Nocodb 0.90.9 Xgenecloud Nocodb 0.90.10 Xgenecloud Nocodb 0.90.11 Xgenecloud Nocodb 0.91.0 Xgenecloud Nocodb 0.91.1 Xgenecloud Nocodb 0.91.6 Xgenecloud Nocodb 0.91.7 Xgenecloud Nocodb 0.91.8 Xgenecloud Nocodb 0.91.9 Xgenecloud Nocodb 0.91.10	100

Common Weakness Enumeration (CWE)

CWE-918 - Server-Side Request Forgery (SSRF)

Summary

Vulnerable Configurations

Common Weakness Enumeration (CWE)

References