Staging Environment: Content and features may be unstable or change without notice.
Search for vulnerabilities
Vulnerability details: VCID-qhp5-594z-7yck
Vulnerability ID VCID-qhp5-594z-7yck
Aliases CVE-2022-2062
GHSA-mx8q-jqwm-85mv
Summary NocoDB information disclosure vulnerability
Status Published
Exploitability 0.5
Weighted Severity 8.0
Risk 4.0
Affected and Fixed Packages Package Details
Weaknesses (5)
CWE-200 Exposure of Sensitive Information to an Unauthorized Actor
CWE-209 Generation of Error Message Containing Sensitive Information
CWE-918 Server-Side Request Forgery (SSRF)
CWE-1035 OWASP Top Ten 2017 Category A9 - Using Components with Known Vulnerabilities
CWE-937 OWASP Top Ten 2013 Category A9 - Using Components with Known Vulnerabilities
System Score Found at
epss 0.01251 https://api.first.org/data/v1/epss?cve=CVE-2022-2062
epss 0.01251 https://api.first.org/data/v1/epss?cve=CVE-2022-2062
epss 0.01251 https://api.first.org/data/v1/epss?cve=CVE-2022-2062
epss 0.01251 https://api.first.org/data/v1/epss?cve=CVE-2022-2062
cvssv3.1_qr HIGH https://github.com/advisories/GHSA-mx8q-jqwm-85mv
cvssv3.1 7.5 https://github.com/nocodb/nocodb
generic_textual HIGH https://github.com/nocodb/nocodb
cvssv3.1 7.5 https://github.com/nocodb/nocodb/commit/a18f5dd53811b9ec1c1bb2fdbfb328c0c87d7fb4
generic_textual HIGH https://github.com/nocodb/nocodb/commit/a18f5dd53811b9ec1c1bb2fdbfb328c0c87d7fb4
cvssv3.1 7.5 https://huntr.dev/bounties/35593b4c-f127-4699-8ad3-f0b2203a8ef6
generic_textual HIGH https://huntr.dev/bounties/35593b4c-f127-4699-8ad3-f0b2203a8ef6
cvssv3.1 7.5 https://nvd.nist.gov/vuln/detail/CVE-2022-2062
generic_textual HIGH https://nvd.nist.gov/vuln/detail/CVE-2022-2062
Reference id Reference type URL
https://api.first.org/data/v1/epss?cve=CVE-2022-2062
https://github.com/nocodb/nocodb
https://github.com/nocodb/nocodb/commit/a18f5dd53811b9ec1c1bb2fdbfb328c0c87d7fb4
https://huntr.dev/bounties/35593b4c-f127-4699-8ad3-f0b2203a8ef6
CVE-2022-2062 https://nvd.nist.gov/vuln/detail/CVE-2022-2062
GHSA-mx8q-jqwm-85mv https://github.com/advisories/GHSA-mx8q-jqwm-85mv
No exploits are available.
Vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N Found at https://github.com/nocodb/nocodb
Attack Vector (AV) Attack Complexity (AC) Privileges Required (PR) User Interaction (UI) Scope (S) Confidentiality Impact (C) Integrity Impact (I) Availability Impact (A)

network

adjacent_network

local

physical

low

high

none

low

high

none

required

unchanged

changed

high

low

none

high

low

none

high

low

none
Vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N Found at https://github.com/nocodb/nocodb/commit/a18f5dd53811b9ec1c1bb2fdbfb328c0c87d7fb4
Attack Vector (AV) Attack Complexity (AC) Privileges Required (PR) User Interaction (UI) Scope (S) Confidentiality Impact (C) Integrity Impact (I) Availability Impact (A)

network

adjacent_network

local

physical

low

high

none

low

high

none

required

unchanged

changed

high

low

none

high

low

none

high

low

none
Vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N Found at https://huntr.dev/bounties/35593b4c-f127-4699-8ad3-f0b2203a8ef6
Attack Vector (AV) Attack Complexity (AC) Privileges Required (PR) User Interaction (UI) Scope (S) Confidentiality Impact (C) Integrity Impact (I) Availability Impact (A)

network

adjacent_network

local

physical

low

high

none

low

high

none

required

unchanged

changed

high

low

none

high

low

none

high

low

none
Vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N Found at https://nvd.nist.gov/vuln/detail/CVE-2022-2062
Attack Vector (AV) Attack Complexity (AC) Privileges Required (PR) User Interaction (UI) Scope (S) Confidentiality Impact (C) Integrity Impact (I) Availability Impact (A)

network

adjacent_network

local

physical

low

high

none

low

high

none

required

unchanged

changed

high

low

none

high

low

none

high

low

none
Exploit Prediction Scoring System (EPSS)
Percentile 0.79748
EPSS Score 0.01251
Published At June 11, 2026, 12:55 p.m.
Date Actor Action Source VulnerableCode Version
2026-06-11T20:31:33.942916+00:00 GHSA Importer Import https://github.com/advisories/GHSA-mx8q-jqwm-85mv 38.6.0