← voltar
CVE-2023-25819

Discourse tags with no visibility are leaking into og:article:tag

CVSS 5.3 MEDIUMEPSS 0.5%CWE-359
Discourse is an open source platform for community discussion. Tags that are normally private are showing in metadata. This affects any site running the `tests-passed` or `beta` branches >= 3.1.0.beta2. The issue is patched in the latest `beta` and `tests-passed` version of Discourse.
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N
Produtos afetados
discourse · discourse

Quer saber se a sua infraestrutura está exposta a isto?

Falar com a TrueHacking →
Referências
https://github.com/discourse/discourse/commit/a9f2c6db64e7d78b8e0f55e7bd77c5fe3459b831https://github.com/discourse/discourse/security/advisories/GHSA-xx2h-mwm7-hq6q