MEDIUM6.3

GHSA-qc99-r4wh-c8h6

Incorrect Access Control in NodeBB

Quick fix

GHSA-qc99-r4wh-c8h6 — nodebb: upgrade to the fixed version with the command below.

npm install nodebb@3.6.7

Details

In NodeBB prior to 3.6.7 an attacker was able to access the restricted tabs for the Admin group which are only allowed the the administrators.

Enter the version of the package you're using.

Introduced in: 0Fixed in: 3.6.7

Fixnpm install nodebb@3.6.7