Lucene search
+L

1 matches found

Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2023/09/29 12:00 a.m.•1 views

CVE-2023-30591: Improper Handling of Unexpected Data Type

Denial-of-service in NodeBB = v2.8.10 allows unauthenticated attackers to trigger a crash, when invoking eventName.startsWith or eventName.toString, while processing Socket.IO messages via crafted Socket.IO messages containing array or object type for the event name respectively...

7.5CVSS7.3AI score0.53804EPSS
SaveExploits0References3
Rows per page
Query Builder