Skip to content
OpenAdvisories

Vendor

NodeBB

14 known vulnerabilities.

Products

NodeBB 13 NodeBB Plugin Emoji 1
All Critical High Medium Low Exploited only Public exploit

1 result · Clear filters · Feed

  • Critical 9.4
    CVE-2022-46164 Public exploit EPSS 47%

    Account takeover via prototype vulnerability

    NodeBB is an open source Node.js based forum software. Due to a plain object with a prototype being used in socket.io message handling a specially crafted payload can be used to impersonate other users and takeover accounts. This vulnerability has been patche…

    NodeBB NodeBB nodebb npm