https://cve.radiocsirt.org Contains only the most 10 recent entries. http://www.rssboard.org/rss-specification python-feedgen en Tue, 06 Oct 2026 16:15:29 +0000 https://cve.radiocsirt.org/vuln/euvd-2026-330156 EUVD-2026-330156 https://cve.radiocsirt.org/vuln/euvd-2026-330156 https://cve.radiocsirt.org/vuln/fkie_cve-2026-46547 <p>NocoDB is software for building databases as spreadsheets. Prior to 2026.04.1, a reflected XSS vulnerability exists in the Page Leaving Warning page. The ncRedirectUrl and ncBackUrl query parameters are used in window.location.href and &lt;a&gt; tag bindings without validation, allowing javascript: URI injection. This vulnerability is fixed in 2026.04.1.</p> <p>NocoDB is software for building databases as spreadsheets. Prior to 2026.04.1, a reflected XSS vulnerability exists in the Page Leaving Warning page. The ncRedirectUrl and ncBackUrl query parameters are used in window.location.href and &lt;a&gt; tag bindings without validation, allowing javascript: URI injection. This vulnerability is fixed in 2026.04.1.</p> https://cve.radiocsirt.org/vuln/fkie_cve-2026-46547 https://cve.radiocsirt.org/vuln/ghsa-9qgr-6vpg-9gh9 <p><strong>Affected:</strong> npm: nocodb</p> <p>### Summary A reflected XSS vulnerability exists in the Page Leaving Warning page. The `ncRedirectUrl` and `ncBackUrl` query parameters are used in `window.location.href` and `&lt;a&gt;` tag bindings without validation, allowing `javascript:` URI injection.</p> <p>### Details `PageLeavingWarning.vue` reads `ncRedirectUrl` and `ncBackUrl` directly from the route query without validation. When `isSameOriginUrl()` returns `false` (as it does for `javascript:` URIs), the raw URL is assigned to `window.location.href`, executing arbitrary JavaScript. The redirect URL is also bound directly to an `&lt;a&gt;` tag&#39;s `href` attribute.</p> <p>### Impact An attacker can execute arbitrary JavaScript in the context of the NocoDB application by sending a crafted link to a victim. No authentication is required.</p> <p>### Credit This issue was reported by [@naoyashiga](https://github.com/naoyashiga).</p> <p><strong>Affected:</strong> npm: nocodb</p> <p>### Summary A reflected XSS vulnerability exists in the Page Leaving Warning page. The `ncRedirectUrl` and `ncBackUrl` query parameters are used in `window.location.href` and `&lt;a&gt;` tag bindings without validation, allowing `javascript:` URI injection.</p> <p>### Details `PageLeavingWarning.vue` reads `ncRedirectUrl` and `ncBackUrl` directly from the route query without validation. When `isSameOriginUrl()` returns `false` (as it does for `javascript:` URIs), the raw URL is assigned to `window.location.href`, executing arbitrary JavaScript. The redirect URL is also bound directly to an `&lt;a&gt;` tag&#39;s `href` attribute.</p> <p>### Impact An attacker can execute arbitrary JavaScript in the context of the NocoDB application by sending a crafted link to a victim. No authentication is required.</p> <p>### Credit This issue was reported by [@naoyashiga](https://github.com/naoyashiga).</p> https://cve.radiocsirt.org/vuln/ghsa-9qgr-6vpg-9gh9