Staging Environment: Content and features may be unstable or change without notice.
Search for vulnerabilities
Vulnerability details: VCID-m82n-a3gn-7bhg
Vulnerability ID VCID-m82n-a3gn-7bhg
Aliases CVE-2022-2064
GHSA-6293-2vg2-pmp5
Summary Insufficient Session Expiration in NocoDB
Status Published
Exploitability 0.5
Weighted Severity 8.0
Risk 4.0
Affected and Fixed Packages Package Details
Weaknesses (3)
CWE-613 Insufficient Session Expiration
CWE-1035 OWASP Top Ten 2017 Category A9 - Using Components with Known Vulnerabilities
CWE-937 OWASP Top Ten 2013 Category A9 - Using Components with Known Vulnerabilities
System Score Found at
epss 0.00311 https://api.first.org/data/v1/epss?cve=CVE-2022-2064
epss 0.00311 https://api.first.org/data/v1/epss?cve=CVE-2022-2064
epss 0.00311 https://api.first.org/data/v1/epss?cve=CVE-2022-2064
cvssv3.1_qr HIGH https://github.com/advisories/GHSA-6293-2vg2-pmp5
cvssv3.1 8.8 https://github.com/nocodb/nocodb
generic_textual HIGH https://github.com/nocodb/nocodb
cvssv3.1 8.8 https://github.com/nocodb/nocodb/commit/c9b5111b25aea2781e19395a8e9107ddbd235a2b
generic_textual HIGH https://github.com/nocodb/nocodb/commit/c9b5111b25aea2781e19395a8e9107ddbd235a2b
cvssv3.1 8.8 https://github.com/nocodb/nocodb/pull/2262
generic_textual HIGH https://github.com/nocodb/nocodb/pull/2262
cvssv3.1 8.8 https://github.com/nocodb/nocodb/pull/2338
generic_textual HIGH https://github.com/nocodb/nocodb/pull/2338
cvssv3.1 8.8 https://github.com/nocodb/nocodb/releases/tag/0.91.9
generic_textual HIGH https://github.com/nocodb/nocodb/releases/tag/0.91.9
cvssv3.1 8.8 https://huntr.dev/bounties/39523d51-fc5c-48b8-a082-171da79761bb
generic_textual HIGH https://huntr.dev/bounties/39523d51-fc5c-48b8-a082-171da79761bb
cvssv3.1 8.8 https://nvd.nist.gov/vuln/detail/CVE-2022-2064
generic_textual HIGH https://nvd.nist.gov/vuln/detail/CVE-2022-2064
Reference id Reference type URL
https://api.first.org/data/v1/epss?cve=CVE-2022-2064
https://github.com/nocodb/nocodb
https://github.com/nocodb/nocodb/commit/c9b5111b25aea2781e19395a8e9107ddbd235a2b
https://github.com/nocodb/nocodb/pull/2262
https://github.com/nocodb/nocodb/pull/2338
https://github.com/nocodb/nocodb/releases/tag/0.91.9
https://huntr.dev/bounties/39523d51-fc5c-48b8-a082-171da79761bb
CVE-2022-2064 https://nvd.nist.gov/vuln/detail/CVE-2022-2064
GHSA-6293-2vg2-pmp5 https://github.com/advisories/GHSA-6293-2vg2-pmp5
No exploits are available.
Vector: CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H Found at https://github.com/nocodb/nocodb
Attack Vector (AV) Attack Complexity (AC) Privileges Required (PR) User Interaction (UI) Scope (S) Confidentiality Impact (C) Integrity Impact (I) Availability Impact (A)

network

adjacent_network

local

physical

low

high

none

low

high

none

required

unchanged

changed

high

low

none

high

low

none

high

low

none
Vector: CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H Found at https://github.com/nocodb/nocodb/commit/c9b5111b25aea2781e19395a8e9107ddbd235a2b
Attack Vector (AV) Attack Complexity (AC) Privileges Required (PR) User Interaction (UI) Scope (S) Confidentiality Impact (C) Integrity Impact (I) Availability Impact (A)

network

adjacent_network

local

physical

low

high

none

low

high

none

required

unchanged

changed

high

low

none

high

low

none

high

low

none
Vector: CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H Found at https://github.com/nocodb/nocodb/pull/2262
Attack Vector (AV) Attack Complexity (AC) Privileges Required (PR) User Interaction (UI) Scope (S) Confidentiality Impact (C) Integrity Impact (I) Availability Impact (A)

network

adjacent_network

local

physical

low

high

none

low

high

none

required

unchanged

changed

high

low

none

high

low

none

high

low

none
Vector: CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H Found at https://github.com/nocodb/nocodb/pull/2338
Attack Vector (AV) Attack Complexity (AC) Privileges Required (PR) User Interaction (UI) Scope (S) Confidentiality Impact (C) Integrity Impact (I) Availability Impact (A)

network

adjacent_network

local

physical

low

high

none

low

high

none

required

unchanged

changed

high

low

none

high

low

none

high

low

none
Vector: CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H Found at https://github.com/nocodb/nocodb/releases/tag/0.91.9
Attack Vector (AV) Attack Complexity (AC) Privileges Required (PR) User Interaction (UI) Scope (S) Confidentiality Impact (C) Integrity Impact (I) Availability Impact (A)

network

adjacent_network

local

physical

low

high

none

low

high

none

required

unchanged

changed

high

low

none

high

low

none

high

low

none
Vector: CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H Found at https://huntr.dev/bounties/39523d51-fc5c-48b8-a082-171da79761bb
Attack Vector (AV) Attack Complexity (AC) Privileges Required (PR) User Interaction (UI) Scope (S) Confidentiality Impact (C) Integrity Impact (I) Availability Impact (A)

network

adjacent_network

local

physical

low

high

none

low

high

none

required

unchanged

changed

high

low

none

high

low

none

high

low

none
Vector: CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H Found at https://nvd.nist.gov/vuln/detail/CVE-2022-2064
Attack Vector (AV) Attack Complexity (AC) Privileges Required (PR) User Interaction (UI) Scope (S) Confidentiality Impact (C) Integrity Impact (I) Availability Impact (A)

network

adjacent_network

local

physical

low

high

none

low

high

none

required

unchanged

changed

high

low

none

high

low

none

high

low

none
Exploit Prediction Scoring System (EPSS)
Percentile 0.54637
EPSS Score 0.00311
Published At June 11, 2026, 12:55 p.m.
Date Actor Action Source VulnerableCode Version
2026-06-11T20:31:33.720590+00:00 GHSA Importer Import https://github.com/advisories/GHSA-6293-2vg2-pmp5 38.6.0