Critical severity9.8NVD Advisory· Published Sep 27, 2023· Updated Jun 17, 2026

CVE-2023-43187

Description

A remote code execution (RCE) vulnerability in the xmlrpc.php endpoint of NodeBB Inc NodeBB forum software prior to v1.18.6 allows attackers to execute arbitrary code via crafted XML-RPC requests.

AI Insight

LLM-synthesized narrative grounded in this CVE's description and references.

Affected products

NodeBB/Nodebb2 versions
cpe:2.3:a:nodebb:nodebb:*:*:*:*:*:*:*:*+ 1 more
- cpe:2.3:a:nodebb:nodebb:*:*:*:*:*:*:*:*range: <1.18.6
- (no CPE)range: <1.18.6
NodeBB Inc/NodeBB forum softwaredescription

Patches

Vulnerability mechanics

References

github.com/jagat-singh-chaudhary/CVE/blob/main/CVE-2023-43187nvdExploitThird Party Advisory

News mentions

No linked articles in our index yet.

cvss	0.637
epss	0.036
exploit	0.000
kev	0.000
patch	0.000
ransomware	0.000