Advisories · Technology
nocobase.
Every CVE that names nocobase among its affected products, newest first. Vendors and products are as the CNA wrote them; check the affected versions on each record.
- CVSS 8.6 High
NocoBase plugin-collection-sql through 2.2.28 SQL Injection via sqlCollection:setFields
- nocobase
- SQL injection
- CVSS 5.1 Medium
NocoBase Rich Text Field Stored Cross-Site Scripting via API
- nocobase
- Cross-site scripting (XSS)
- CVSS 5.1 Medium
NocoBase 2.1.20 Server-Side Request Forgery via serverRequest wrapper
- nocobase
- Server-side request forgery (SSRF)