Lucene search

K
cnvdChina National Vulnerability DatabaseCNVD-2021-95235
HistoryDec 01, 2021 - 12:00 a.m.

Nodebb licensing issue vulnerability

2021-12-0100:00:00
China National Vulnerability Database
www.cnvd.org.cn
7

0.001 Low

EPSS

Percentile

46.8%

NodeBB is a forum system built by the Design Create Play team using Node.js, a web application platform built on top of Google’s V8 JavaScript engine. an authorization issue vulnerability exists in Nodebb, which stems from a faulty token authentication logic in the product, and could be exploited by an attacker to access the API using the master token to access the API.

CPENameOperatorVersion
nodebb nodebblt1.18.5

0.001 Low

EPSS

Percentile

46.8%