CVE-2022-36076

CVE-2022-36076 is a high-severity vulnerability affecting NodeBB Forum Software, specifically versions prior to 1.17.2. It re-exposes a weakness in the single sign-on (SSO) process, where an unnecessarily strict conditional rendered a security nonce opt-in instead of opt-out. This flaw could allow a sophisticated Man-in-the-Middle (MITM) attacker to potentially hijack user accounts during SSO. The vulnerability has a CVSS score of 7.5 (High) due to its network attack vector, high attack complexity, and high impact on confidentiality, integrity, and availability. There is currently no evidence of active exploitation, public exploit code, or significant community discussion surrounding this CVE.