Vulnerabilidades en NodeBB
11 resultadosAnálisis Vexday
NodeBB apresenta 11 vulnerabilidades cadastradas, com 6 classificadas como críticas, sendo a traversal de diretório (CWE-22) o padrão predominante de falha. Nenhuma vulnerabilidade está sob exploração ativa documentada no KEV, mas o volume de críticas e a publicação recente de 1 CVE nos últimos 90 dias indicam superfície de risco significativa que demanda monitoramento contínuo.
CVE-2022-46164CRITICALAccount takeover via prototype vulnerabilityEPSS 49.0%CVE-2021-43788MEDIUMPath traversal in translator module of NobeBBEPSS 25.8%CVE-2020-15149CRITICALAccount takeover in NodeBBEPSS 2.4%CVE-2021-43786CRITICALAPI token verification can be bypassedEPSS 2.3%CVE-2021-43787CRITICALXSS via prototype pollutionEPSS 1.3%CVE-2022-36045CRITICALAccount takeover via cryptographically weak PRNG in NodeBB ForumEPSS 1.1%CVE-2023-26045CRITICALNodeBB vulnerable to path traversal and code execution via prototype vulnerabilityEPSS 1.0%CVE-2021-47746HIGHNodeBB Plugin Emoji 3.2.1 - Arbitrary File WriteEPSS 0.7%CVE-2022-36076HIGHAccount takeover via SSO plugins in NodeBBEPSS 0.5%CVE-2023-2850MEDIUMNodeBB is affected by a Cross-Site WebSocket Hijacking vulnerability due to missing validation of the request origin. Exploitation of this vEPSS 0.3%CVE-2026-58593HIGHNodeBB - ActivityPub Author Spoofing via Unvalidated attributedTo Mapped to Local UserEPSS 0.2%