CVE-2023-43187

A remote code execution (RCE) vulnerability in the xmlrpc.php endpoint of NodeBB Inc NodeBB forum software prior to v1.18.6 allows attackers to execute arbitrary code via crafted XML-RPC requests.

CVSS v3.1

9.8 CRITICALCVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

EPSS

45.40% chance of exploitation in the next 30 days, 99th percentile

Nuclei

critical · CWE-91

Published

2023-09-26

Updated

2024-09-24

Nuclei templates (1)

• projectdiscovery/nuclei-templates/blob/main/http/cves/2023/CVE-2023-43187.yaml

References

• CVE Record
• NVD entry

Related

• CVE-2023-43183
• CVE-2023-43196
• CVE-2023-4318
• CVE-2023-43197
• CVE-2023-43177
• CVE-2023-43198