PT-2023-4083 · Nodebb · Nodebb

Name of the Vulnerable Software and Affected Versions: NodeBB versions 2.5.0 through 2.8.7 Description: The issue arises due to the use of object destructuring assignment syntax in the user export code path, combined with a path traversal vulnerability. This allows a specially crafted payload to...