~ / search / GHSA-qc99-r4wh-c8h6

GHSA-qc99-r4wh-c8h6

Incorrect Access Control in NodeBB

Source: GitHub Advisory Database (reviewed) Moderate CVE-2024-29316

Packages

EcosystemPackageAffectedFixed in
npm nodebb < 3.6.7 3.6.7

Details

As written in the advisory (Markdown source, shown as plain text).

In NodeBB prior to 3.6.7 an attacker was able to access the restricted tabs for the Admin group which are only allowed the the administrators.

References

External links from the advisory. They lead to third-party sites.