Search Results (42 CVEs found)

CVE Vendors Products Updated CVSS v3.1
CVE-2023-2850 1 Nodebb 1 Nodebb 2024-11-21 4.7 Medium
NodeBB is affected by a Cross-Site WebSocket Hijacking vulnerability due to missing validation of the request origin. Exploitation of this vulnerability allows certain user information to be extracted by attacker.
CVE-2023-2848 1 Movim 1 Movim 2024-11-21 8 High
Movim prior to version 0.22 is affected by a Cross-Site WebSocket Hijacking vulnerability. This was the result of a missing header validation.