NocoDB 任意文件下载漏洞

Description

PoC

None yet. Search at https://trap.biu.life/?ref=rss

References

• https://zhuanlan.zhihu.com/p/640019431
• https://blog.csdn.net/weixin_44632654/article/details/133856753
• https://zone.huoxian.cn/d/2798-cve-2023-35843-nocodb-download
• https://www.ctfiot.com/127032.html
• https://pentest-tools.com/vulnerabilities-exploits/nocodb-version-01061-arbitrary-file-read_2041
• https://nvd.nist.gov/vuln/detail/CVE-2023-35843
• https://github.com/b3nguang/CVE-2023-35843
• https://ddpoc.com/DVB-2023-4530.html
• https://cn-sec.com/archives/2113655.html
• https://github.com/Lserein/CVE-2023-35843

Related Vulnerabilities

• PoCCVE-2026-28358: NocoDB - User Enumeration
• NocoDB存在用户名枚举(CVE-2026-28358)
• PoCCVE-2025-27506: NocoDB < 0.258.0 - Reflected XSS in Password Reset
• PoCnocodb-public-registration-enabled: NocoDB Public Registration Enabled
• PoCCVE-2023-35843: NocoDB version <= 0.106.1 - Arbitrary File Read
• PoCCVE-2023-35843: NocoDB Arbitrary File Read
• NocoDB /download/ 文件读取漏洞
• Nocodb服务端请求伪造漏洞
• NocoDB存在路径遍历漏洞(CVE-2023-35843)