CVE-2025-29513

Mô tả

Tham khảo

• tonysec.com/posts/cve-2025-29513 · Third Party Advisory

Lỗ hổng khác của nodebb

• CVE-2026-58593CAO 7.5NodeBB does not bind the claimed author of an inbound ActivityPub object to the authenticated remote actor. The inbound middleware verifies …
• CVE-2025-50979CAO 8.6NodeBB v4.3.0 is vulnerable to SQL injection in its search-categories API endpoint (/api/v3/search/categories). The search query parameter i…
• CVE-2025-29512TRUNG BÌNH 6.1Cross-Site Scripting (XSS) vulnerability in NodeBB v4.0.4 and before allows remote attackers to store arbitrary code and potentially render …
• CVE-2024-57041TRUNG BÌNH 4.6A persistent cross-site scripting (XSS) vulnerability in NodeBB v3.11.0 allows remote attackers to store arbitrary code in the 'about me' se…
• CVE-2024-29316TRUNG BÌNH 6.3NodeBB 3.6.7 is vulnerable to Incorrect Access Control, e.g., a low-privileged attacker can access the restricted tabs for the Admin group v…