CVE-2023-30591 — NodeBB Pre-Authentication Denial-of-Service
Denial-of-service in NodeBB <= v2.8.10 allows unauthenticated attackers to trigger a crash, when invoking `eventName.startsWith()` or `eventName.toString()`, while processing So…
Published: 2023-09-29 · CVSS: 7.5 · CVSS 3.1
Denial-of-service in NodeBB <= v2.8.10 allows unauthenticated attackers to trigger a crash, when invoking `eventName.startsWith()` or `eventName.toString()`, while processing Socket.IO messages via crafted Socket.IO messages containing array or object type for the event name respectively.
Source: CVE Program · Revision 8b16575c39f1e1810c5e863010da073d2d3285e7