GHSA-QC99-R4WH-C8H6 Incorrect Access Control in NodeBB

In NodeBB prior to 3.6.7 an attacker was able to access the restricted tabs for the Admin group which are only allowed the the administrators...