CVE-2023-5104: 
JavaScript vulnerability analysis and mitigation

An Improper Input Validation vulnerability (CVE-2023-5104) was discovered in GitHub repository nocodb/nocodb prior to version 0.96.0. The vulnerability was disclosed on September 21, 2023, and affects the NocoDB software (NVD).

The vulnerability is classified as CWE-20 (Improper Input Validation) with a CVSS v3.1 base score of 6.5 (MEDIUM), and vector string CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H. A separate assessment by huntr.dev rated it with a CVSS 3.0 score of 5.7 (MEDIUM) with vector string CVSS:3.0/AV:N/AC:L/PR:L/UI:R/S:U/C:N/I:N/A:H (NVD).

The vulnerability primarily affects the availability of the system, as indicated by the CVSS metrics showing high impact on availability (A:H) while having no direct impact on confidentiality (C:N) or integrity (I:N) (NVD).

The vulnerability requires network access (AV:N) with low attack complexity (AC:L) and user interaction (UI:R). No authentication is required according to the NIST assessment, though huntr.dev's assessment suggests low privileges are needed (NVD).

The vulnerability has been patched in version 0.96.0 of nocodb. Users are advised to upgrade to this version or later to mitigate the vulnerability (Github Patch).