What is GHSA-vh2g-6c4x-5hmp?

GHSA-vh2g-6c4x-5hmp is a security advisory published by GitHub Security Advisories with Critical severity. Path traversal and code execution via prototype vulnerability

Which CVE IDs does GHSA-vh2g-6c4x-5hmp cover?

GHSA-vh2g-6c4x-5hmp covers the following CVE IDs: CVE-2023-26045. Each CVE has its own detail page on EchelonGraph Pulse with the synthesized EG score.

What is the CVSS v3 score of GHSA-vh2g-6c4x-5hmp?

GHSA-vh2g-6c4x-5hmp has a CVSS v3 base score of 10.0, published by GitHub Security Advisories.

Which products are affected by GHSA-vh2g-6c4x-5hmp?

GHSA-vh2g-6c4x-5hmp affects 1 product, including: npm/nodebb:\u003e= 2.5.0, \u003c 2.8.7.

GHSA-vh2g-6c4x-5hmpCriticalCVSS 10.0

Path traversal and code execution via prototype vulnerability

Vendor

GitHub Security Advisories

Published

July 25, 2023

Last Modified

November 9, 2023

🔗 CVE IDs covered (1)

CVE-2023-26045 →

📋 Description

Impact

Due to the use of the object destructuring assignment syntax in the user export code path, combined with a path traversal vulnerability, a specially crafted payload could invoke the user export logic to arbitrarily execute javascript files on the local disk.

Patches

Patched in v2.8.7

Workarounds

Site maintainers can cherry pick ec58700f6dff8e5b4af1544f6205ec362b593092 into their codebase to patch the exploit.

🎯 Affected products1

npm/nodebb:>= 2.5.0, < 2.8.7

🔗 References (5)

https://github.com/NodeBB/NodeBB/security/advisories/GHSA-vh2g-6c4x-5hmp
https://nvd.nist.gov/vuln/detail/CVE-2023-26045
https://github.com/NodeBB/NodeBB/commit/ec58700f6dff8e5b4af1544f6205ec362b593092
https://security.netapp.com/advisory/ntap-20230831-0004/
https://github.com/advisories/GHSA-vh2g-6c4x-5hmp