Discourse · Discourse · CVE-2022-39241
**Name of the Vulnerable Software and Affected Versions**
Discourse versions prior to the latest stable, beta, and test-passed versions
**Description**
A malicious admin could exploit this issue to perform port enumeration on the local host or other hosts on the internal network, as well as against hosts on the Internet.
**Recommendations**
For all versions prior to the latest stable, beta, and test-passed versions, update to the latest version to resolve the issue.
As a temporary workaround, self-hosters can use the `DISCOURSE BLOCKED IP BLOCKS` env var to stop webhooks from accessing private IPs.