What is GHSA-72fv-qgj6-2w2p?

GHSA-72fv-qgj6-2w2p is a security advisory published by GitHub Security Advisories with Medium severity. Cross-site Scripting in NodeBB

Which CVE IDs does GHSA-72fv-qgj6-2w2p cover?

GHSA-72fv-qgj6-2w2p covers the following CVE IDs: CVE-2015-9286. Each CVE has its own detail page on EchelonGraph Pulse with the synthesized EG score.

What is the CVSS v3 score of GHSA-72fv-qgj6-2w2p?

GHSA-72fv-qgj6-2w2p has a CVSS v3 base score of 6.1, published by GitHub Security Advisories.

Which products are affected by GHSA-72fv-qgj6-2w2p?

GHSA-72fv-qgj6-2w2p affects 1 product, including: npm/nodebb:\u003c 0.8.2.

GHSA-72fv-qgj6-2w2pMediumCVSS 6.1

Cross-site Scripting in NodeBB

Vendor

GitHub Security Advisories

Published

May 1, 2019

Last Modified

February 1, 2023

🔗 CVE IDs covered (1)

CVE-2015-9286 →

📋 Description

Controllers.outgoing in controllers/index.js in NodeBB before 0.7.3 has outgoing XSS.

🎯 Affected products1

npm/nodebb:< 0.8.2

🔗 References (6)

https://nvd.nist.gov/vuln/detail/CVE-2015-9286
https://github.com/NodeBB/NodeBB/pull/3371
https://github.com/NodeBB/NodeBB/compare/56b79a9...4de7529
https://vulners.com/securityvulns/SECURITYVULNS:DOC:32625
https://www.vulnerability-lab.com/get_content.php?id=1608
https://github.com/advisories/GHSA-72fv-qgj6-2w2p