Lucene search
+L

2 matches found

Cvelist
Cvelist
added 2025/08/27 12:0 a.m.17 views

CVE-2025-50979

NodeBB v4.3.0 is vulnerable to SQL injection in its search-categories API endpoint /api/v3/search/categories. The search query parameter is not properly sanitized, allowing unauthenticated, remote attackers to inject boolean-based blind and PostgreSQL error-based payloads...

0.08144EPSS
SaveExploits1References1
Vulnrichment
Vulnrichment
added 2025/08/27 12:0 a.m.3 views

CVE-2025-50979

NodeBB v4.3.0 is vulnerable to SQL injection in its search-categories API endpoint /api/v3/search/categories. The search query parameter is not properly sanitized, allowing unauthenticated, remote attackers to inject boolean-based blind and PostgreSQL error-based payloads...

8.3AI score0.08144EPSS
SaveExploits1References1
Rows per page
Query Builder