Ecosyste.ms: Advisories

Security Advisories: GSA_kwCzR0hTQS1yZjNnLXY4cDUtcDY3Nc4AAwJ4

NodeBB vulnerable to account takeover via prototype vulnerability

Impact

Due to a plain object with a prototype being used in socket.io message handling a specially crafted payload can be used to impersonate other users and takeover accounts.

Patches

Patched in 2.6.1

Workarounds

Site maintainers can cherry-pick https://github.com/NodeBB/NodeBB/commit/48d143921753914da45926cca6370a92ed0c46b8 into their codebase to patch the exploit.

For more information

If you have any questions or comments about this advisory:

Discuss it on our community forum
Email us at [email protected]

Permalink: https://github.com/advisories/GHSA-rf3g-v8p5-p675
JSON: https://advisories.ecosyste.ms/api/v1/advisories/GSA_kwCzR0hTQS1yZjNnLXY4cDUtcDY3Nc4AAwJ4
Source: GitHub Advisory Database
Origin: Unspecified
Severity: Critical
Classification: General
Published: about 2 years ago
Updated: almost 2 years ago

CVSS Score: 9.4
CVSS vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:L

EPSS Percentage: 0.00197
EPSS Percentile: 0.57512

Identifiers: GHSA-rf3g-v8p5-p675, CVE-2022-46164
References:

• https://github.com/NodeBB/NodeBB/security/advisories/GHSA-rf3g-v8p5-p675
• https://nvd.nist.gov/vuln/detail/CVE-2022-46164
• https://github.com/NodeBB/NodeBB/commit/48d143921753914da45926cca6370a92ed0c46b8
• https://github.com/NodeBB/NodeBB/releases/tag/v2.6.1
• https://github.com/advisories/GHSA-rf3g-v8p5-p675

Repository: https://github.com/NodeBB/NodeBB
Blast Radius: 4.5

Affected Packages