2 matches found
CVE-2023-30591
Denial-of-service in NodeBB = v2.8.10 allows unauthenticated attackers to trigger a crash, when invoking eventName.startsWith or eventName.toString, while processing Socket.IO messages via crafted Socket.IO messages containing array or object type for the event name respectively...
8.7CVSS0.58692EPSS
SaveExploits0References7
CVE-2023-30591: Improper Handling of Unexpected Data Type
Denial-of-service in NodeBB = v2.8.10 allows unauthenticated attackers to trigger a crash, when invoking eventName.startsWith or eventName.toString, while processing Socket.IO messages via crafted Socket.IO messages containing array or object type for the event name respectively...
7.5CVSS7.3AI score0.58692EPSS
SaveExploits0References3
20