Moderate severityNVD Advisory· Published Mar 28, 2024· Updated Nov 15, 2024

CVE-2024-29316

Description

NodeBB 3.6.7 is vulnerable to Incorrect Access Control, e.g., a low-privileged attacker can access the restricted tabs for the Admin group via "isadmin":true.

AI Insight

LLM-synthesized narrative grounded in this CVE's description and references.

Affected packages

Versions sourced from the GitHub Security Advisory.

Package	Affected versions	Patched versions
nodebbnpm	< 3.6.7	3.6.7

Affected products

NodeBB/Nodebbcpe-rescue
ghsa-coords
pkg:npm/nodebb
Range: < 3.6.7

Patches

Vulnerability mechanics

References

github.com/advisories/GHSA-qc99-r4wh-c8h6ghsaADVISORY
nvd.nist.gov/vuln/detail/CVE-2024-29316ghsaADVISORY
medium.com/%40krityamkarma858041/broken-access-control-nodebb-v3-6-7-eebc59c24debghsaWEB
nodebb.org/bountyghsaWEB
nodebb.org/bounty/mitre

News mentions

No linked articles in our index yet.

cvss	0.260
epss	0.000
exploit	0.000
kev	0.000
patch	0.000
ransomware	0.000