CVE-2025-29513 | Teknoloji dünyasından en güncel haberleri ve güvenlikle ilgili gelişmeleri takip edin.

Cross-Site Scripting (XSS) vulnerability in NodeBB v4.0.4 and before allows remote attackers to store arbitrary code in the admin API Access token generator.
Medium CVSS: 6.1

CVE-2025-29513

Cross-Site Scripting (XSS) vulnerability in NodeBB v4.0.4 and before allows remote attackers to store arbitrary code in the admin API Access token generator.
Vendor
Nodebb
Product
Nodebb
CWE
CWE-79
Yayın Tarihi
2025-04-18 18:15:48
Güncelleme
2025-04-23 17:24:54
Source Identifier
cve@mitre.org
KEV Date Added
-

Kategoriler

CWE-79 Nodebb MEDIUM Nodebb 2025

Referanslar

http://nodebb.com https://www.tonysec.com/posts/cve-2025-29513/