← All advisories

Moderate severityGHSA Advisory· Published Apr 30, 2019· Updated Aug 6, 2024

CVE-2015-9286

CVE-2015-9286

Description

Controllers.outgoing in controllers/index.js in NodeBB before 0.7.3 has outgoing XSS.

AI Insight

LLM-synthesized narrative grounded in this CVE's description and references.

Affected packages

Versions sourced from the GitHub Security Advisory.

Package	Affected versions	Patched versions
nodebbnpm	< 0.8.2	0.8.2

Affected products

2

Lumiverse/NodebbGHSA
Range: < 0.8.2
Package: https://npmjs.com/package/nodebb
ghsa-coords
pkg:npm/nodebb
Range: < 0.8.2

Patches

Vulnerability mechanics

References

6

github.com/advisories/GHSA-72fv-qgj6-2w2pghsaADVISORY
nvd.nist.gov/vuln/detail/CVE-2015-9286ghsaADVISORY
github.com/NodeBB/NodeBB/compare/56b79a9...4de7529ghsax_refsource_MISCWEB
github.com/NodeBB/NodeBB/pull/3371ghsax_refsource_MISCWEB
vulners.com/securityvulns/SECURITYVULNS:DOC:32625ghsax_refsource_MISCWEB
www.vulnerability-lab.com/get_content.phpghsax_refsource_MISCWEB

News mentions

0

No linked articles in our index yet.