CVE-2022-2064 - Insufficient Session Expiration in nocodb/nocodb

HIGH

Insufficient Session Expiration in nocodb/nocodb

Published Jun 13, 2022

8.8

HIGH

CVSS 3.1

EPSS 1.22%

Insufficient Session Expiration in GitHub repository nocodb/nocodb prior to 0.91.7+.

Vendor Nocodb Product Nocodb/nocodb Default
unknown
Affected
- ≥ unspecified, < 0.91.7+

Default status is the baseline for the product. Each version can override it (patched versions can be marked unaffected).

Vendor	Product	Default status	Versions
Nocodb	Nocodb/nocodb	unknown	Affected ≥ unspecified, < 0.91.7+

Ecosystem	Package	Introduced	Fixed
npm	nocodb	0	0.91.9

No remediation recorded yet.

Weaknesses (1)

CWE-613

Link	Providers	Tags
https://euvd.enisa.europa.eu/vulnerability/EUVD-2022-5948		Advisory
https://github.com/advisories/GHSA-6293-2vg2-pmp5		Advisory
https://github.com/nocodb/nocodb/commit/c9b5111b25aea2781e19395a8e9107ddbd235a2b		x_refsource_MISCPatchThird Party Advisory
https://github.com/nocodb/nocodb/pull/2262
https://github.com/nocodb/nocodb/pull/2338
https://github.com/nocodb/nocodb/releases/tag/0.91.9
https://huntr.dev/bounties/39523d51-fc5c-48b8-a082-171da79761bb		x_refsource_CONFIRMExploitPatchThird Party Advisory
https://nvd.nist.gov/vuln/detail/CVE-2022-2064