Lucene search
Veracode Vulnerability DatabaseVERACODE:41794HistoryJul 27, 2023 - 12:22 p.m.
Websocket Session Hijacking
2023-07-2712:22:21
Veracode Vulnerability Database
sca.analysiscenter.veracode.com
9
nodebb
vulnerability
websocket
session
hijacking
csrf
cross-origin
information
4.7 Medium
CVSS3
Attack Vector
NETWORK
Attack Complexity
LOW
Privileges Required
NONE
User Interaction
REQUIRED
Scope
CHANGED
Confidentiality Impact
LOW
Integrity Impact
NONE
Availability Impact
NONE
CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:N/A:N
0.001 Low
EPSS
Percentile
23.6%
nodebb is vulnerable to Websocket Session Hijacking. The vulnerability exists due to missing csrf token in the request which allows an attacker to gain access to private information via cross-origin websocket session hijacking
Related
prion
prion
Cross site scripting
2023-07-25 12:15:00
openvas
openvas
NodeBB 2.x < 2.8.13, 3.x < 3.1.3 Information Disclosure Vulnerability
2023-09-28 00:00:00
github
github
osv
osv
Unintentional leakage of private information via cross-origin websocket session hijacking
2023-07-25 18:04:28
CVE-2023-2850
2023-07-25 12:15:10
cvelist
cvelist
CVE-2023-2850
2023-07-25 11:13:18
cve
cve
CVE-2023-2850
2023-07-25 12:15:10
nvd
nvd
CVE-2023-2850
2023-07-25 12:15:10
4.7 Medium
CVSS3
Attack Vector
NETWORK
Attack Complexity
LOW
Privileges Required
NONE
User Interaction
REQUIRED
Scope
CHANGED
Confidentiality Impact
LOW
Integrity Impact
NONE
Availability Impact
NONE
CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:N/A:N
0.001 Low
EPSS
Percentile
23.6%
Related for VERACODE:41794