PT-2022-4655 · Nodebb · Nodebb

Hakupiku · Published 2022-08-30 · Updated 2023-10-26 · CVE-2022-36045

Positive Technologies (AI Summary)

CVSS v3.1

9.0

Critical

Base vector

AV:N/AC:H/PR:N/UI:N/S:C/C:H/I:H/A:H

Name of the Vulnerable Software and Affected Versions NodeBB Forum Software versions prior to 1.19.7 NodeBB Forum Software versions prior to 2.0.0

Description The utils.generateUUID helper function in NodeBB Forum Software uses a cryptographically insecure pseudo-random number generator (Math.random()), which allows an attacker to calculate the reset code for an account they do not have access to. This vulnerability impacts all installations of NodeBB and enables an attacker to take over any account without the involvement of the victim.

Recommendations For NodeBB Forum Software versions prior to 1.19.7, upgrade to version 1.19.7 or later. For NodeBB Forum Software versions prior to 2.0.0, upgrade to version 2.0.0 or later. As a temporary workaround, consider restricting access to the password reset functionality until a patch is applied. Note: There is no known workaround other than applying the patch sets listed above, which will fully patch the vulnerability.

Exploit

Fix

Use of Insufficiently Random Values

Weakness Enumeration

CWE-338

CWE-330

Related Identifiers

BDU:2022-05540

CVE-2022-36045

GHSA-P4CC-W597-6CPM

Affected Products

Nodebb

References · 13

• 🔥 https://github.com/CVEProject/cvelistV5/tree/main/cves/2022/36xxx/CVE-2022-36045.json · Exploit
• https://github.com/NodeBB/NodeBB/commit/81e3c1ba488d03371a5ce8d0ebb5c5803026e0f9 · Patch
• https://github.com/NodeBB/NodeBB/commit/e802fab87f94a13f397f04cfe6068f2f7ddf7888 · Patch
• https://nvd.nist.gov/vuln/detail/CVE-2022-36045 · Security Note
• https://osv.dev/vulnerability/CVE-2022-36045 · Vendor Advisory
• https://bdu.fstec.ru/vul/2022-05540 · Security Note
• https://osv.dev/vulnerability/GHSA-p4cc-w597-6cpm · Vendor Advisory
• https://github.com/NodeBB/NodeBB · Note
• https://github.com/NodeBB/NodeBB/security/advisories/GHSA-p4cc-w597-6cpm · Note
• https://t.me/cvenotify/35513 · Telegram Post
• https://twitter.com/PikuHaku/status/1717588044516036650 · Twitter Post
• https://t.me/cibsecurity/49106 · Telegram Post
• https://t.me/echeloneyes/638 · Telegram Post