CVE-2023-26045: NodeBB Forum Software Remote Code Execution Flaw

From securityonline.info

Bulletin board platforms form the heart of our digital forums, acting as arenas for interaction, discussion, and debate. Amidst the array of platforms available, NodeBB Forum Software has carved a niche for itself, leveraging Node.js and real-time technologies to offer an engaging user experience that reimagines the classic forum format for the modern web. However, two security vulnerabilities have been recently discovered in NodeBB that could allow attackers to execute arbitrary code or leak private information.

Read more…