Description

NodeBB is an open source Node.js based forum software. Due to a plain object with a prototype being used in socket.io message handling a specially crafted payload can be used to impersonate other users and takeover accounts. This vulnerability has been patched in version 2.6.1. Users are advised to upgrade. Users unable to upgrade may cherry-pick commit `48d143921753914da45926cca6370a92ed0c46b8` into their codebase to patch the exploit.

Remediation

References

https://github.com/NodeBB/NodeBB/commit/48d143921753914da45926cca6370a92ed0c46b8

https://github.com/NodeBB/NodeBB/security/advisories/GHSA-rf3g-v8p5-p675

Related Vulnerabilities

CVE-2020-28268 Vulnerability in npm package controlled-merge

CVE-2018-1000136 Vulnerability in npm package electron

CVE-2022-23532 Vulnerability in maven package org.neo4j.procedure:apoc

CVE-2021-41189 Vulnerability in maven package org.dspace:dspace-api

CVE-2022-31103 Vulnerability in npm package lettersanitizer

Severity

Critical

Classification

CWE-665 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

Tags

Patch Third Party Advisory