CVE-2021-43788 Path traversal in translator module of NobeBB
Attackers can read JSON files outside the intended directory in NodeBB, requiring an upgrade to the latest version.
- Exploited in the wild
- Not known
- Login needed
- Any signed-in user
- Attackable
- Over the internet
- Victim action needed
- Not needed
- Fix
- Available
What is CVE-2021-43788?
CVE-2021-43788 is a medium-severity path traversal vulnerability in NodeBB, published on 29 Nov 2021. Any signed-in user can exploit it over the network, with no action from the victim.
Official description
Nodebb is an open source Node.js based forum software. Prior to v1.18.5, a path traversal vulnerability was present that allowed users to access JSON files outside of the expected `languages/` directory. The vulnerability has been patched as of v1.18.5. Users are advised to upgrade as soon as possible.
Weakness: CWE-22
Which versions are affected by CVE-2021-43788?
2 open source packages ship an affected version, including nodebb. It affects 1 product.
| Package | Affected | Fixed in |
|---|---|---|
nodebb npm | From 1.0.4 | 1.18.5 |
nodebb npm | From 1.0.4 | 1.18.5 |
Products include Nodebb Nodebb.
How do I fix CVE-2021-43788?
Upgrade nodebb to 1.18.5 or later.
Upgrade, and resolve every user-supplied path against an allowed base folder before opening it. More about Path traversal.
Is CVE-2021-43788 being exploited?
There is no known exploitation of CVE-2021-43788 in the wild and no public exploit code.
Other vulnerabilities in NodeBB
Sources
Also known as GHSA-pfj7-2qfw-vwgm.