Lucene search

K
veracodeVeracode Vulnerability DatabaseVERACODE:33137
HistoryNov 30, 2021 - 9:05 a.m.

Path Traversal

2021-11-3009:05:46
Veracode Vulnerability Database
sca.analysiscenter.veracode.com
7

0.001 Low

EPSS

Percentile

43.1%

nodebb is vulnerable to path traversal. An attacker can access JSON files outside of the expected languages/ directory through the Languages.get function in languages.js

CPENameOperatorVersion
nodebbeq1.4.0
nodebbeq1.4.0

0.001 Low

EPSS

Percentile

43.1%