CVE-2025-27506CWE-79

NocoDB Vulnerable to Reflected Cross-Site Scripting on Reset Password Page

Medium · published March 6, 2025

CVSS v3.1
5.4
EPSS
1%
Percentile
53.0
In the wild
Unconfirmed
What it is

NocoDB is software for building databases as spreadsheets. The API endpoint related to the password reset function is vulnerable to Reflected Cross-Site-Scripting. The endpoint /api/v1/db/auth/password/reset/:tokenId is vulnerable to Reflected Cross-Site-Scripting. The flaw occurs due to implementation of the client-side template engine ejs, specifically on file resetPassword.ts where the template is using the insecure function “<%-“, which is rendered by the function renderPasswordReset. This vulnerability is fixed in 0.258.0.

The record
Technical detail
CVSS v3.1
5.4 · MEDIUM
Vector
CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:L/I:L/A:N
CVSS v4.0
Not supplied
EPSS
0.00711 · 53.0th percentile
Weakness
CWE-79 · Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')
Published
2025-03-06T18:52Z
EPSS history
Timeline
  • 06 MAR 18:52Z
    NocoDB Vulnerable to Reflected Cross-Site Scripting on Reset Password Page
    cvelistv5