Lucene search

K

[email protected]NVD:CVE-2024-29316

HistoryMar 28, 2024 - 11:15 p.m.

CVE-2024-29316

2024-03-2823:15:46

[email protected]

web.nvd.nist.gov

1

nodebb

access control

vulnerability

6.5 Medium

AI Score

Confidence

High

0.0004 Low

EPSS

Percentile

9.1%

NodeBB 3.6.7 is vulnerable to Incorrect Access Control, e.g., a low-privileged attacker can access the restricted tabs for the Admin group via “isadmin”:true.

References

medium.com/%40krityamkarma858041/broken-access-control-nodebb-v3-6-7-eebc59c24deb

nodebb.org/bounty/

6.5 Medium

AI Score

Confidence

High

0.0004 Low

EPSS

Percentile

9.1%

Related for NVD:CVE-2024-29316