medium6.3
CVE-2024-29316
Incorrect Access Control in NodeBB
Impact
In NodeBB prior to 3.6.7 an attacker was able to access the restricted tabs for the Admin group which are only allowed the the administrators.
Affected packages
| Ecosystem | Package | Affected | Fixed in |
|---|---|---|---|
| npm | nodebb | < 3.6.7 | 3.6.7 |
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Nodebb | Nodebb | Version 3.6.7 |