PT-2022-24994 · Nodebb · Nodebb

Name of the Vulnerable Software and Affected Versions: NodeBB versions up to 2.5.7 Description: A vulnerability was found in NodeBB, affecting an unknown part of the file /register/abort. The manipulation leads to cross-site request forgery. It is possible to initiate the attack remotely...

CVE-2022-3978: Incorrect Authorization

A vulnerability, which was classified as problematic, was found in NodeBB up to 2.5.7. This affects an unknown part of the file /register/abort. The manipulation leads to cross-site request forgery. It is possible to initiate the attack remotely. Upgrading to version 2.5.8 is able to address this...