PT-2023-26549 · Discourse · Discourse

Jomaxro · Publicado 2023-07-28 · Atualizado 2024-03-06 · CVE-2023-38685

Positive Technologies (AI Summary)

CVSS v3.1

4.3

Média

Vetor base

AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:N

Name of the Vulnerable Software and Affected Versions Discourse versions prior to 3.0.6 of the stable branch and version 3.1.0.beta7 of the beta and tests-passed branches.

Description Discourse is an open source discussion platform. Information about restricted-visibility topic tags could be obtained by unauthorized users.

Recommendations For versions prior to 3.0.6 of the stable branch, update to version 3.0.6 or later. For versions prior to 3.1.0.beta7 of the beta and tests-passed branches, update to version 3.1.0.beta7 or later.

Exploit

Correção

Information Disclosure

Enumeração de Fraquezas

CWE-200

Identificadores relacionados

BIT-DISCOURSE-2023-38685

CVE-2023-38685

GHSA-WX6X-Q4GP-MGV5

Produtos afetados

Discourse

Referências · 8

• 🔥 https://github.com/CVEProject/cvelistV5/tree/main/cves/2023/38xxx/CVE-2023-38685.json · Exploit
• https://github.com/discourse/discourse/commit/073661142369a0a66c25775cc3870582a679ef8b · Correção
• https://github.com/discourse/discourse/security/advisories/GHSA-wx6x-q4gp-mgv5 · Aviso do Fabricante
• https://osv.dev/vulnerability/BIT-discourse-2023-38685 · Aviso do Fabricante
• https://nvd.nist.gov/vuln/detail/CVE-2023-38685 · Nota de Segurança
• https://t.me/cvenotify/55452 · Publicação no Telegram
• https://osv.dev/vulnerability/CVE-2023-38685 · Aviso do Fabricante
• https://t.me/cibsecurity/67391 · Publicação no Telegram