CVE-2024-29316

NodeBB version 3.6.7 is vulnerable to Incorrect Access Control , allowing a low-privileged attacker to bypass security restrictions. By setting the parameter "isadmin":true , an attacker can gain unauthorized access to restricted tabs intended exclusively for the Admin group . While the vulnerabi...