https://cve.radiocsirt.org Contains only the most 10 recent entries. http://www.rssboard.org/rss-specification python-feedgen en Thu, 08 Oct 2026 03:49:02 +0000 https://cve.radiocsirt.org/vuln/cve-2026-47387 <p><strong>Affected:</strong> nocodb</p> <p>NocoDB is software for building databases as spreadsheets. Prior to 2026.05.1, the shared form-view submit handler (packages/nc-gui/composables/useSharedFormViewStore.ts) in NocoDB writes the form&#39;s redirect_url to window.location.href after a same-host check that does not validate the URL scheme. A user with editor role (or above) on any base can plant a javascript: URL in the form&#39;s redirect_url; when an authenticated viewer opens the share-link and submits the form, the payload executes in the NocoDB origin and can read the session token from localStorage[&#34;nocodb-gui-v2&#34;]. This vulnerability is fixed in 2026.05.1.</p> <p><strong>Affected:</strong> nocodb</p> <p>NocoDB is software for building databases as spreadsheets. Prior to 2026.05.1, the shared form-view submit handler (packages/nc-gui/composables/useSharedFormViewStore.ts) in NocoDB writes the form&#39;s redirect_url to window.location.href after a same-host check that does not validate the URL scheme. A user with editor role (or above) on any base can plant a javascript: URL in the form&#39;s redirect_url; when an authenticated viewer opens the share-link and submits the form, the payload executes in the NocoDB origin and can read the session token from localStorage[&#34;nocodb-gui-v2&#34;]. This vulnerability is fixed in 2026.05.1.</p> https://cve.radiocsirt.org/vuln/cve-2026-47387