GitHub Advisoryadvisory · npm

GHSA-vh2g-6c4x-5hmp Path traversal and code execution via prototype vulnerability

CRITICAL Published 2023-07-25 Modified 2023-07-25 Official page ↗
Aliases
CVE-2023-26045
Ecosystem
npm
Packages
nodebb
Severity
Critical
CVSS vector
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:H/I:H/A:H
Weaknesses
CWE-22
Reviewed
2023-07-25

Affected packages

• npm nodebb: >= 2.5.0, < 2.8.7 → fixed in 2.8.7

Description

Impact Due to the use of the object destructuring assignment syntax in the user export code path, combined with a path traversal vulnerability, a specially crafted payload could invoke the user export logic to arbitrarily execute javascript files on the local disk. Patches Patched in v2.8.7 Workarounds Site maintainers can cherry pick ec58700f6dff8e5b4af1544f6205ec362b593092 into their codebase to patch the exploit.

Related

Alias · CVE (1)

  • CVE-2023-26045 NodeBB is Node.js based forum software. vulnerability

Weakness · CWE (1)

  • CWE-22 Improper Limitation of a Pathname to a Restricted Directory weakness

References