CVE-2025-29512

概要

参考情報

• tonysec.com/posts/cve-2025-29512 · Third Party Advisory

nodebb のその他の脆弱性

• CVE-2026-58593高 7.5NodeBB does not bind the claimed author of an inbound ActivityPub object to the authenticated remote actor. The inbound middleware verifies …
• CVE-2025-50979高 8.6NodeBB v4.3.0 is vulnerable to SQL injection in its search-categories API endpoint (/api/v3/search/categories). The search query parameter i…
• CVE-2025-29513中 6.1Cross-Site Scripting (XSS) vulnerability in NodeBB v4.0.4 and before allows remote attackers to store arbitrary code in the admin API Access…
• CVE-2024-57041中 4.6A persistent cross-site scripting (XSS) vulnerability in NodeBB v3.11.0 allows remote attackers to store arbitrary code in the 'about me' se…
• CVE-2024-29316中 6.3NodeBB 3.6.7 is vulnerable to Incorrect Access Control, e.g., a low-privileged attacker can access the restricted tabs for the Admin group v…