Lucene search
PRIOn knowledge basePRION:CVE-2023-2850HistoryJul 25, 2023 - 12:15 p.m.
Cross site scripting
2023-07-2512:15:00
PRIOn knowledge base
www.prio-n.com
6
cross-site scripting
nodebb
websocket hijacking
user information
security vulnerability
NodeBB is affected by a Cross-Site WebSocket Hijacking vulnerability due to missing validation of the request origin. Exploitation of this vulnerability allows certain user information to be extracted by attacker.
Related
openvas
openvas
NodeBB 2.x < 2.8.13, 3.x < 3.1.3 Information Disclosure Vulnerability
2023-09-28 00:00:00
github
github
osv
osv
Unintentional leakage of private information via cross-origin websocket session hijacking
2023-07-25 18:04:28
CVE-2023-2850
2023-07-25 12:15:10
veracode
veracode
Websocket Session Hijacking
2023-07-27 12:22:21
cvelist
cvelist
CVE-2023-2850
2023-07-25 11:13:18
cve
cve
CVE-2023-2850
2023-07-25 12:15:10
nvd
nvd
CVE-2023-2850
2023-07-25 12:15:10