CVE-2022-36076

NodeBB Forum Software is powered by Node.js and supports either Redis, MongoDB, or a PostgreSQL database. Due to an unnecessarily strict conditional in the code handling the first step of the SSO process, the pre-existing logic that added (and later checked) a nonce was inadvertently rendered opt-in instead of opt-out. This re-exposed a vulnerability in that a specially crafted Man-in-the-Middle (MITM) attack could theoretically take over another user account during the single sign-on process. The issue has been fully patched in version 1.17.2.

• CWE-352

• https://blogs.opera.com/security/2022/03/bug-bounty-adventures-a-nodebb-0-day/Exploit, Third Party Advisory
• https://github.com/NodeBB/NodeBB/commit/a2400f6baff44cb2996487bcd0cc6e2acc74b3d4Patch, Third Party Advisory
• https://github.com/NodeBB/NodeBB/security/advisories/GHSA-xmgg-fx9p-prq6Exploit, Patch, Third Party Advisory
• https://blogs.opera.com/security/2022/03/bug-bounty-adventures-a-nodebb-0-day/Exploit, Third Party Advisory
• https://github.com/NodeBB/NodeBB/commit/a2400f6baff44cb2996487bcd0cc6e2acc74b3d4Patch, Third Party Advisory
• https://github.com/NodeBB/NodeBB/security/advisories/GHSA-xmgg-fx9p-prq6Exploit, Patch, Third Party Advisory

Published

Sep 2, 2022

Last Modified

Jun 17, 2026

Status

Modified

• How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
• Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
• PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
• AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.

• CVE-2022-36070Poetry is a dependency manager for Python. To handle depende…7.3
• CVE-2022-36071SFTPGo is configurable SFTP server with optional HTTP/S, FTP…8.1
• CVE-2022-36072SilverwareGames.io is a social network for users to play vid…5.9
• CVE-2022-36073RubyGems.org is the Ruby community gem host. A bug in passwo…8.8
• CVE-2022-36074Nextcloud server is an open source personal cloud product. A…7.5
• CVE-2022-36075Nextcloud files access control is a nextcloud app to manage …4.3
• CVE-2022-36077The Electron framework enables writing cross-platform deskto…6.1
• CVE-2022-36078Binary provides encoding/decoding in Borsh and other formats…7.5
• CVE-2022-36079Parse Server is an open source backend that can be deployed …7.5
• CVE-2022-3608Cross-site Scripting (XSS) - Stored in GitHub repository tho…8.4
• CVE-2022-36080Wikmd is a file based wiki that uses markdown. Prior to vers…6.1
• CVE-2022-36081Wikmd is a file based wiki that uses markdown. Prior to vers…7.5