Описание
Nodebb is an open source Node.js based forum software. Prior to v1.18.5, a path traversal vulnerability was present that allowed users to access JSON files outside of the expected languages/ directory. The vulnerability has been patched as of v1.18.5. Users are advised to upgrade as soon as possible.
Ссылки
- ExploitThird Party Advisory
- PatchThird Party Advisory
- Release NotesThird Party Advisory
- Third Party Advisory
- ExploitThird Party Advisory
- PatchThird Party Advisory
- Release NotesThird Party Advisory
- Third Party Advisory
Уязвимые конфигурации
Конфигурация 1Версия от 1.0.4 (включая) до 1.18.4 (включая)
cpe:2.3:a:nodebb:nodebb:*:*:*:*:*:*:*:*
EPSS
Процентиль: 85%
0.0252
Низкий
5 Medium
CVSS3
4 Medium
CVSS2
Дефекты
CWE-22
Связанные уязвимости
CVSS3: 5
github
около 4 лет назад
NodeBB vulnerable to path traversal in translator module
EPSS
Процентиль: 85%
0.0252
Низкий
5 Medium
CVSS3
4 Medium
CVSS2
Дефекты
CWE-22