writeups.xyz / NodeBB 1.18.4 - Remote Code Execution With One Shot

Submitter : c2a

Date: 30 November 2021

Bounty : 1,536

Vulnerabilities :

• RCE
• XSS
• Authentication Bypass
• Arbitrary File Read

Programs :

• NodeBB

Authors :

• Sonar (@SonarSource)

Link :
https://blog.sonarsource.com/nodebb-remote-code-execution-with-one-shot