July 25, 2023, 12:15 p.m. |

National Vulnerability Database web.nvd.nist.gov

NodeBB is affected by a Cross-Site WebSocket Hijacking vulnerability due to missing validation of the request origin. Exploitation of this vulnerability allows certain user information to be extracted by attacker.

cross-site cve exploitation hijacking information missing origin request validation vulnerability websocket

Application Security Assurance Associate

@ DTCC | Tampa, FL, United States

Threat Hunter II

@ Microsoft | Hyderabad, Telangana, India

Staff Cyber Security Engineer (Application Security, Emerging Platforms)

@ NBCUniversal | Englewood Cliffs, NEW JERSEY, United States

Cyber Security Senior Cyber Security Engineer

@ Sopra Steria | Noida, Uttar Pradesh, India

Data Protection and Privacy Manager

@ Future PLC | London, England, United Kingdom

RSOC Manager

@ The University of Texas at Austin | AUSTIN, TX