Vulnerability · Published Nov 29, 2021 · Assigned by GitHub_M
CVE-2021-43786API token verification can be bypassed
Critical 9.8
In plain English
A critical-severity improper authentication in NodeBB from NodeBB. There are no confirmed reports of exploitation so far. The chance it is exploited in the next 30 days is estimated at 2.4% (higher than 84% of all known vulnerabilities). Fixed versions are available - upgrade the affected package.
Severity (CVSS 3.1)9.8Critical
Exploit odds (30 days)2.4%top 16.1% of all CVEs
Exploited in the wildNo reportsnot in CISA KEV
Attack toolingNoneno public tooling known
Official description
Nodebb is an open source Node.js based forum software. In affected versions incorrect logic present in the token verification step unintentionally allowed master token access to the API. The vulnerability has been patch as of v1.18.5. Users are advised to upgrade as soon as possible.
Affected packages & fixed versions
| Ecosystem | Package | Fixed in | Advisory |
|---|---|---|---|
| npm | nodebb | 1.18.5 | GHSA-hf2m-j98r-4fqw |
Affected products (as reported)
Weakness: CWE-287 · Vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
References
- https://github.com/NodeBB/NodeBB/releases/tag/v1.18.5 x_refsource_MISC
- https://github.com/NodeBB/NodeBB/security/advisories/GHSA-hf2m-j98r-4fqw x_refsource_CONFIRM
- https://github.com/NodeBB/NodeBB/commit/04dab1d550cdebf4c1567bca9a51f8b9ca48a500 x_refsource_MISC
- https://blog.sonarsource.com/nodebb-remote-code-execution-with-one-shot/ x_refsource_MISC