3 matches found
Information Exposure
Overview Affected versions of this package are vulnerable to Information Exposure via the supi parameter. An attacker can cause internal URL parsing errors and expose system-level error details by injecting control characters, such as %00, into requests. This can be used for service fingerprintin...
8.7CVSS5.9AI score0.00506EPSS
SaveExploits1References2
NodeBB < 4.3.2 SQLi Vulnerability
NodeBB is prone to an SQL injection SQLi vulnerability. SPDX-FileCopyrightText: 2025 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only CPE = "cpe:/a:nodebb:nodebb";...
8.6CVSS8AI score0.08144EPSS
SaveExploits1References3
20