Read the docs

NodeBB

Records24All Threatist records
Exploited (KEV)0None in CISA KEV
CVSS critical7CVSS 9.0–10.0
CVSS high6CVSS 7.0–8.9

Exploited now

NodeBB records in CISA KEV

No NodeBB vulnerabilities are listed in CISA KEV.

Components

Products in the NVD configurations · select one to filter the records
Nodebb 20 records HIGH Blog Comments 1 record LOW

Records

1 record in Blog Comments · all components

TI-2020-11928 CVE-2020-15156 · GHSA-43m5-c88r-cjvv

XSS due to lack of CSRF validation for replying/publishing

Priority LOW 36

In nodebb-plugin-blog-comments before version 0.7.0, a logged in user is vulnerable to an XSS attack which could allow a third party to post on their behalf on the forum.

CVSS 3.1HIGH 8.1 Network No auth User interaction EPSS 0.00612 Published 2020-08-26 Fixed in 0.7.0 CWE-352
Open these records in search →