Access Restriction Bypass Affecting nodebb package, versions *
Threat Intelligence
Do your applications use this vulnerable package?
In a few clicks we can analyze your entire application and see what components are vulnerable in your application, and suggest you quick fixes.
Test your applications- Snyk ID SNYK-JS-NODEBB-8384073
- published 19 Nov 2024
- disclosed 29 Mar 2024
- credit Vibhor Sharma
Introduced: 29 Mar 2024
CVE-2024-29316 Open this link in a new tabHow to fix?
A fix was pushed into the master branch but not yet published.
Overview
nodebb is a package that utilizes web sockets for instant interactions and real-time notifications.
Affected versions of this package are vulnerable to Access Restriction Bypass due to improper enforcement of access controls. An attacker can gain unauthorized access to restricted administrative tabs by exploiting this vulnerability.
PoC
The user with the least privileges needs to navigate to the group section;
Intercept the response for the group requests;
In the response modify certain parameters:
“system”:0,”private”:0,”isMember”:true,”isPending”:true,”isInvited”:true,”isOwner”:true,”isAdmin”:true, “;Forward the request and see that the attacker can access the restricted information.