p PatchFirst

CVE-2021-43788

CVE-2021-43788 · Path traversal in translator module of NobeBB

This page contains facts from public vulnerability sources. Check the original advisory before updating.

Nodebb is an open source Node.js based forum software. Prior to v1.18.5, a path traversal vulnerability was present that allowed users to access JSON files outside of the expected `languages/` directory. The vulnerability has been patched as of v1.18.5. Users are advised to upgrade as soon as possible.

CVSS 5.0 · Medium · EPSS 25.8% · Fix available

Published
Updated

Stack: node

Affected products and versions

  • nodebb

    Versions
    • >= 1.0.4, < 1.18.5: Affected

    No fix published

  • nodebb npm

    Affected ranges
    • SEMVER: ≥ 1.0.4, < 1.18.5

    Update to 1.18.5

Original sources

Check your server →