CVE-2023-49098lowCWE-284

CVE-2023-49098: falha de baixa gravidade em discourse-reactions

Reaction data for user notifications exposed in Discourse-reactions

Publicada em · Atualizada em

Seguir esta CVE+ Monitorar discourse-reactions

Aviso por e-mail quando ela entrar no KEV, ganhar PoC pública ou subir de nota.

8Vexday Risk Score

Sem sinal de exploração. Nenhum artefato público de exploração conhecido até agora.

ssvc Trackcvss 3.5epss 0.3%
Discourse-reactions is a plugin that allows user to add their reactions to the post. Data about a user's reaction notifications could be exposed. This vulnerability was patched in commit 2c26939.
CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:U/C:L/I:N/A:N
Produtos afetados
discourse · discourse-reactions
CVEs relacionadas — discourse-reactions

No mesmo produto, das mais perigosas para as menos.

CVE-2021-41140MEDIUMReactions leak for secure category topics and private messagesEPSS 0.9%CVE-2023-30611MEDIUMReaction metadata exposed in private topics in Discourse-reactionsEPSS 0.4%CVE-2024-31219MEDIUMDiscourse-reactions' reaction data and public topic whisper content exposed on reactions given user activity pageEPSS 0.4%