Skip to content
OpenAdvisories

Product · NodeBB

NodeBB Plugin Emoji

1 known vulnerabilities.

All Critical High Medium Low Exploited only Public exploit

1 result · Clear filters · Feed

  • High 7.5
    CVE-2021-47746

    NodeBB Plugin Emoji 3.2.1 - Arbitrary File Write

    NodeBB Plugin Emoji 3.2.1 contains an arbitrary file write vulnerability that allows administrative users to write files to arbitrary system locations through the emoji upload API. Attackers with admin access can craft file upload requests with directory trav…

    NodeBB NodeBB Plugin Emoji