Exploitation Summary
EIP tracks 1 public exploit for EIP-2026-104189. PoCs published by Vibhor Sharma.
AI-analyzed exploit summary The writeup describes a broken access control vulnerability in NodeBB v3.6.7, where an attacker can manipulate JSON response parameters to gain unauthorized access to admin-restricted tabs. The steps involve intercepting and modifying specific attributes in the group section response.
Description
Broken Access Control - on NodeBB v3.6.7
Exploits (1)
The writeup describes a broken access control vulnerability in NodeBB v3.6.7, where an attacker can manipulate JSON response parameters to gain unauthorized access to admin-restricted tabs. The steps involve intercepting and modifying specific attributes in the group section response.