Description

Controllers.outgoing in controllers/index.js in NodeBB before 0.7.3 has outgoing XSS.

Remediation

References

https://www.vulnerability-lab.com/get_content.php?id=1608

https://vulners.com/securityvulns/SECURITYVULNS:DOC:32625

https://github.com/NodeBB/NodeBB/pull/3371

https://github.com/NodeBB/NodeBB/compare/56b79a9...4de7529

Related Vulnerabilities

CVE-2018-3721 Vulnerability in npm package lodash._basemerge

CVE-2023-49487 Vulnerability in maven package com.jfinal:jfinal

CVE-2021-29452 Vulnerability in npm package a12n-server

CVE-2020-7691 Vulnerability in maven package org.webjars.bower:jspdf

CVE-2020-7770 Vulnerability in npm package json8

Severity

High

Classification

CWE-79 CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N

Tags

Exploit Third Party Advisory Patch Release Notes