Vulnerabilities > CVE-2023-30591 - Improper Check for Unusual or Exceptional Conditions vulnerability in Nodebb

CVSS 7.5 - HIGH

Attack vector

NETWORK

Attack complexity

LOW

Privileges required

NONE

Confidentiality impact

NONE

Integrity impact

NONE

Availability impact

HIGH

network

low complexity

nodebb

CWE-754

NVD

Published: 2023-09-29

Updated: 2023-10-02

Summary

Denial-of-service in NodeBB <= v2.8.10 allows unauthenticated attackers to trigger a crash, when invoking `eventName.startsWith()` or `eventName.toString()`, while processing Socket.IO messages via crafted Socket.IO messages containing array or object type for the event name respectively.

Vulnerable Configurations

Part	Description	Count
Application	Nodebb Nodebb Nodebb 0.0.3 Nodebb Nodebb 0.0.4 Nodebb Nodebb 0.0.5 Nodebb Nodebb 0.0.6 Nodebb Nodebb 0.0.7 Nodebb Nodebb 0.1.0 Nodebb Nodebb 0.1.1 Nodebb Nodebb 0.2.0 Nodebb Nodebb 0.2.1 Nodebb Nodebb 0.2.2 Nodebb Nodebb 0.3.0 Nodebb Nodebb 0.3.1 Nodebb Nodebb 0.3.2 Nodebb Nodebb 0.4.0 Nodebb Nodebb 0.4.1 Nodebb Nodebb 0.4.2 Nodebb Nodebb 0.4.3 Nodebb Nodebb 0.5.0 Nodebb Nodebb 0.5.1 Nodebb Nodebb 0.5.2 Nodebb Nodebb 0.5.3 Nodebb Nodebb 0.5.4 Nodebb Nodebb 0.5.5 Nodebb Nodebb 0.5.6 Nodebb Nodebb 0.5.7 Nodebb Nodebb 0.6.0 Nodebb Nodebb 0.6.1 Nodebb Nodebb 0.7.0 Nodebb Nodebb 0.7.1 Nodebb Nodebb 0.7.2 Nodebb Nodebb 0.7.3 Nodebb Nodebb 0.8.0 Nodebb Nodebb 0.8.1 Nodebb Nodebb 0.8.2 Nodebb Nodebb 0.9.0 Nodebb Nodebb 0.9.1 Nodebb Nodebb 0.9.2 Nodebb Nodebb 0.9.3 Nodebb Nodebb 0.9.4 Nodebb Nodebb 1.0.0 Nodebb Nodebb 1.0.1 Nodebb Nodebb 1.0.2 Nodebb Nodebb 1.0.3 Nodebb Nodebb 1.0.4 Nodebb Nodebb 1.1.0 Nodebb Nodebb 1.1.1 Nodebb Nodebb 1.1.2 Nodebb Nodebb 1.1.3 Nodebb Nodebb 1.2.0 Nodebb Nodebb 1.2.1 Nodebb Nodebb 1.2.2 Nodebb Nodebb 1.3.0 Nodebb Nodebb 1.4.0 Nodebb Nodebb 1.4.1 Nodebb Nodebb 1.4.2 Nodebb Nodebb 1.4.3 Nodebb Nodebb 1.4.4 Nodebb Nodebb 1.4.5 Nodebb Nodebb 1.4.6 Nodebb Nodebb 1.5.0 Nodebb Nodebb 1.5.1 Nodebb Nodebb 1.5.2 Nodebb Nodebb 1.5.3 Nodebb Nodebb 1.6.0 Nodebb Nodebb 1.6.1 Nodebb Nodebb 1.7.0 Nodebb Nodebb 1.7.1 Nodebb Nodebb 1.7.2 Nodebb Nodebb 1.7.3 Nodebb Nodebb 1.7.4 Nodebb Nodebb 1.7.5 Nodebb Nodebb 1.8.0 Nodebb Nodebb 1.8.1 Nodebb Nodebb 1.8.2 Nodebb Nodebb 1.9.0 Nodebb Nodebb 1.9.1 Nodebb Nodebb 1.9.2 Nodebb Nodebb 1.9.3 Nodebb Nodebb 1.12.2 Nodebb Nodebb 1.13.0 Nodebb Nodebb 1.13.1 Nodebb Nodebb 1.13.2 Nodebb Nodebb 1.13.3 Nodebb Nodebb 1.13.4 Nodebb Nodebb 1.14.0 Nodebb Nodebb 1.14.1 Nodebb Nodebb 1.14.2 Nodebb Nodebb 1.14.3 Nodebb Nodebb 1.15.0 Nodebb Nodebb 1.15.1 Nodebb Nodebb 1.15.2 Nodebb Nodebb 1.15.3 Nodebb Nodebb 1.15.4 Nodebb Nodebb 1.15.5 Nodebb Nodebb 1.16.0 Nodebb Nodebb 1.16.1 Nodebb Nodebb 1.16.2 Nodebb Nodebb 1.17.0 Nodebb Nodebb 1.17.1 Nodebb Nodebb 1.18.4 Nodebb Nodebb 1.18.5 Nodebb Nodebb 1.18.6 Nodebb Nodebb 1.18.7 Nodebb Nodebb 1.19.0 Nodebb Nodebb 1.19.1 Nodebb Nodebb 1.19.3 Nodebb Nodebb 1.19.4 Nodebb Nodebb 1.19.5 Nodebb Nodebb 1.19.6 Nodebb Nodebb 1.19.7 Nodebb Nodebb 1.19.8 Nodebb Nodebb 2.0.0 Nodebb Nodebb 2.0.1 Nodebb Nodebb 2.1.0 Nodebb Nodebb 2.1.1 Nodebb Nodebb 2.2.0 Nodebb Nodebb 2.2.1 Nodebb Nodebb 2.2.2 Nodebb Nodebb 2.2.3 Nodebb Nodebb 2.2.4 Nodebb Nodebb 2.2.5 Nodebb Nodebb 2.3.0 Nodebb Nodebb 2.3.1 Nodebb Nodebb 2.4.0 Nodebb Nodebb 2.4.1 Nodebb Nodebb 2.4.2 Nodebb Nodebb 2.4.3 Nodebb Nodebb 2.4.4 Nodebb Nodebb 2.4.5 Nodebb Nodebb 2.5.0 Nodebb Nodebb 2.5.1 Nodebb Nodebb 2.5.2 Nodebb Nodebb 2.5.3 Nodebb Nodebb 2.5.4 Nodebb Nodebb 2.5.5 Nodebb Nodebb 2.5.6 Nodebb Nodebb 2.5.7 Nodebb Nodebb 2.5.8 Nodebb Nodebb 2.6.0 Nodebb Nodebb 2.6.1 Nodebb Nodebb 2.7.0 Nodebb Nodebb 2.8.0 Nodebb Nodebb 2.8.1 Nodebb Nodebb 2.8.2 Nodebb Nodebb 2.8.3 Nodebb Nodebb 2.8.4 Nodebb Nodebb 2.8.5 Nodebb Nodebb 2.8.6 Nodebb Nodebb 2.8.7	300

Common Weakness Enumeration (CWE)

CWE-754 - Improper Check for Unusual or Exceptional Conditions

Summary

Vulnerable Configurations

Common Weakness Enumeration (CWE)

References