pentester.land· Nov 30, 2021· by Sonar (@SonarSource)💰 Bounty: 1,536

NodeBB 1.18.4 - Remote Code Execution With One Shot

Target Program: NodeBB

🎯 Vulnerability: Remote Code Execution (RCE)

💡 Defense Fix: Avoid executing shell commands via system(). Use parameterized APIs and strict input sanitization.

#RCE#XSS#Authentication bypass#Arbitrary file read