https://cve.radiocsirt.org Contains only the most 10 recent entries. http://www.rssboard.org/rss-specification python-feedgen en Sat, 24 Oct 2026 04:36:26 +0000 https://cve.radiocsirt.org/vuln/cnvd-2025-05387 cnvd-2025-05387 https://cve.radiocsirt.org/vuln/cnvd-2025-05387 https://cve.radiocsirt.org/vuln/euvd-2026-221179 EUVD-2026-221179 https://cve.radiocsirt.org/vuln/euvd-2026-221179 https://cve.radiocsirt.org/vuln/fkie_cve-2025-27506 <p>NocoDB is software for building databases as spreadsheets. The API endpoint related to the password reset function is vulnerable to Reflected Cross-Site-Scripting. The endpoint /api/v1/db/auth/password/reset/:tokenId is vulnerable to Reflected Cross-Site-Scripting. The flaw occurs due to implementation of the client-side template engine ejs, specifically on file resetPassword.ts where the template is using the insecure function “&lt;%-“, which is rendered by the function renderPasswordReset. This vulnerability is fixed in 0.258.0.</p> <p>NocoDB is software for building databases as spreadsheets. The API endpoint related to the password reset function is vulnerable to Reflected Cross-Site-Scripting. The endpoint /api/v1/db/auth/password/reset/:tokenId is vulnerable to Reflected Cross-Site-Scripting. The flaw occurs due to implementation of the client-side template engine ejs, specifically on file resetPassword.ts where the template is using the insecure function “&lt;%-“, which is rendered by the function renderPasswordReset. This vulnerability is fixed in 0.258.0.</p> https://cve.radiocsirt.org/vuln/fkie_cve-2025-27506 https://cve.radiocsirt.org/vuln/ghsa-wf6c-hrhf-86cw <p><strong>Affected:</strong> npm: nocodb</p> <p>### Summary</p> <p>The API endpoint related to the password reset function is vulnerable to Reflected Cross-Site-Scripting.</p> <p>### Details</p> <p>Throughout the source-code analysis, it has been found that the endpoint /api/v1/db/auth/password/reset/:tokenId is vulnerable to Reflected Cross-Site-Scripting. The flaw occurs due to implementation of the client-side template engine ejs, specifically on file resetPassword.ts where the template is using the insecure function “&lt;%-“ https://github.com/nocodb/nocodb/blob/ba5a191b33259d984fc92df225f7d82ede2ddb56/packages/nocodb/src/modules/auth/ui/auth/resetPassword.ts#L71 which is rendered by the function renderPasswordReset: https://github.com/nocodb/nocodb/blob/ba5a191b33259d984fc92df225f7d82ede2ddb56/packages/nocodb/src/modules/auth/auth.controller.ts#L251</p> <p>### PoC</p> <p>Send the request below to a vulnerable instance: `/api/v1/db/auth/password/reset/asdsad%3C%2F%73%63%72%69%70%74%3E%3C%73%63%72%69%70%74%3E%61%6C%65%72%74%28%31%29%3C%2F%73%63%72%69%70%74%3E/`</p> <p></p> <p>### Impact</p> <p>The vulnerability affect end-users, allowing an attacker to craft and send a malicious link to the victim which leads running script on their browser.</p> <p>### Credits [l34k3d](https://github.com/xL34K3D) [ottoboni](https://github.com/gabrielott)</p> <p><strong>Affected:</strong> npm: nocodb</p> <p>### Summary</p> <p>The API endpoint related to the password reset function is vulnerable to Reflected Cross-Site-Scripting.</p> <p>### Details</p> <p>Throughout the source-code analysis, it has been found that the endpoint /api/v1/db/auth/password/reset/:tokenId is vulnerable to Reflected Cross-Site-Scripting. The flaw occurs due to implementation of the client-side template engine ejs, specifically on file resetPassword.ts where the template is using the insecure function “&lt;%-“ https://github.com/nocodb/nocodb/blob/ba5a191b33259d984fc92df225f7d82ede2ddb56/packages/nocodb/src/modules/auth/ui/auth/resetPassword.ts#L71 which is rendered by the function renderPasswordReset: https://github.com/nocodb/nocodb/blob/ba5a191b33259d984fc92df225f7d82ede2ddb56/packages/nocodb/src/modules/auth/auth.controller.ts#L251</p> <p>### PoC</p> <p>Send the request below to a vulnerable instance: `/api/v1/db/auth/password/reset/asdsad%3C%2F%73%63%72%69%70%74%3E%3C%73%63%72%69%70%74%3E%61%6C%65%72%74%28%31%29%3C%2F%73%63%72%69%70%74%3E/`</p> <p></p> <p>### Impact</p> <p>The vulnerability affect end-users, allowing an attacker to craft and send a malicious link to the victim which leads running script on their browser.</p> <p>### Credits [l34k3d](https://github.com/xL34K3D) [ottoboni](https://github.com/gabrielott)</p> https://cve.radiocsirt.org/vuln/ghsa-wf6c-hrhf-86cw