CRITICAL✓ PATCH🇵🇱 Wersja polska

CVE-2023-26045

CVSS 10.0v3.1pub. 2023-07-24upd. 2024-11-21

NodeBB is Node.js based forum software. Starting in version 2.5.0 and prior to version 2.8.7, due to the use of the object destructuring assignment syntax in the user export code path, combined with a path traversal vulnerability, a specially crafted payload could invoke the user export logic to arbitrarily execute javascript files on the local disk. This issue is patched in version 2.8.7. As a workaround, site maintainers can cherry pick the fix into their codebase to patch the exploit.

CVSS Vector
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:H/I:H/A:H

  • Nodebb

    APP
    Nodebb
    2.5.0 – 2.8.7 (excl.)
🟢
PATCH AVAILABLE
Vendor update available. Deploy in standard maintenance cycle.
Tags
Path Traversal
CWE
References

Related vulnerabilities

CVE-2023-43187CRITICAL9.8PL ✓same product

RCE w NodeBB via endpoint xmlrpc.php — wykonanie dowolnego kodu

CVE-2022-46164CRITICAL9.4PL ✓same product

NodeBB — przejęcie konta przez prototype pollution w socket.io

CVE-2022-36045CRITICAL9.0PL ✓same product

NodeBB: przejęcie konta przez przewidywalny token resetu hasła

CVE-2021-43787CRITICAL9.0PL ✓same product

NodeBB: prototype pollution i XSS w module uploader umożliwiające przejęcie konta

CVE-2021-43786CRITICAL9.8PL ✓same product

NodeBB — pominięcie uwierzytelnienia w weryfikacji tokenów API (Auth Bypass)