CVE-2023-2850 (published 2023-07-25T11:13:18.100Z)
NodeBB is affected by a Cross-Site WebSocket Hijacking vulnerability due to missing validation of the request origin. Exploitation of this vulnerability allows certain user information to be extracted by attacker.
Affected products: Vendor: NodeBB
Product: NodeBB
Versions: < 2.8.13, >= 3.0.0, < 3.1.3