Quick answers
- Is CVE-2021-43788 exploited in the wild?
- No. Junglewise Threat Intelligence has no report of CVE-2021-43788 being exploited in the wild.
- How severe is CVE-2021-43788?
- Low severity, with a CVSS score of 3.1, published 30 November 2021.
- Which products and versions are affected?
- NodeBB 1.0.4 - 1.18.4.
- Is there a fix for CVE-2021-43788?
- A patch was published on 2021-11-30: Fixed in NodeBB v1.18.5 Junglewise finds every place you run it, drafts the upgrade and applies it once you approve.
- How is CVE-2021-43788 attacked?
- It is attacked over the network.
- Am I affected by CVE-2021-43788?
- Check whether you run NodeBB at an affected version. Junglewise does that check for you around the clock: connect your code, cloud and domains, and it matches new vulnerabilities like this one against what you actually run and tells you when one reaches you.
Technical details
The vulnerability is a path traversal flaw (CWE-22) in the translator module that fails to properly validate user-supplied input when constructing file paths. An authenticated user could exploit this to access JSON files located outside the restricted languages/ directory by using path traversal sequences in the translator module's input. The attack requires authentication and network access to the NodeBB instance. An attacker can achieve unauthorized file read access to JSON files, potentially exposing configuration data or other sensitive information. The fix was applied in version 1.18.5; users can also cherry-pick commit c8b2fc46dc698db687379106b3f01c71b80f495f.
Affected products
- NodeBB NodeBB 1.0.4 - 1.18.4
Identifiers
- CVE-2021-43788
- GHSA-pfj7-2qfw-vwgm
Timeline
- 2021-11-30: disclosed: Published on GitHub Security Advisories
- 2021-11-30: patched: Fixed in NodeBB v1.18.5