← Database

CVE-2021-43788

MEDIUM CVSS: 5.0 Published: 2021-11-29 Modified: 2026-06-17

Description

Nodebb is an open source Node.js based forum software. Prior to v1.18.5, a path traversal vulnerability was present that allowed users to access JSON files outside of the expected `languages/` directory. The vulnerability has been patched as of v1.18.5. Users are advised to upgrade as soon as possible.

Affected Platforms

Nodebb Nodebb

Weakness Type

CWE-22

References