Discourse · Discourse · CVE-2022-31060
**Name of the Vulnerable Software and Affected Versions**
Discourse versions prior to 2.8.4 in the stable branch
Discourse versions prior to 2.9.0.beta5 in the beta and tests-passed branches
**Description**
Discourse is an open-source discussion platform. Prior to the fixed versions, banner topic data is exposed on login-required sites. As a workaround, one may disable banners.
**Recommendations**
For versions prior to 2.8.4 in the stable branch, update to version 2.8.4 or later.
For versions prior to 2.9.0.beta5 in the beta and tests-passed branches, update to version 2.9.0.beta5 or later.
As a temporary workaround, consider disabling banners until a patch is available.