Vulnerability Bulletins |
CVE-2025-50979 |
|
| Affected software | POSTGRESQL |
| NodeBB v4.3.0 is vulnerable to SQL injection in its search-categories API endpoint (/api/v3/search/categories). The search query parameter is not properly sanitized, allowing unauthenticated, remote attackers to inject boolean-based blind and PostgreSQL error-based payloads. | |
Link: |
|
| https://nvd.nist.gov/vuln/detail/CVE-2025-50979 | |