PT-2021-23140 · Discourse · Discourse

Joernchen · Published 2021-10-20 · Updated 2024-03-06 · CVE-2021-41163

Positive Technologies (AI Summary)

CVSS v3.1

10

Critical

Base vector

AV:N/AC:L/PR:N/UI:N/S:C/C:H/I:H/A:H

Name of the Vulnerable Software and Affected Versions Discourse versions 2.7.8 and earlier

Description Discourse is an open source platform for community discussion. In affected versions, maliciously crafted requests could lead to remote code execution. This resulted from a lack of validation in subscribe url values. It is estimated that around 14,300 sites are potentially vulnerable, with 8,639 potentially vulnerable systems located in the USA.

Recommendations To resolve the issue, update to version 2.7.9 or later. As a temporary workaround, consider blocking requests with a path starting with /webhooks/aws at an upstream proxy.

Fix

RCE

Special Elements Injection

Weakness Enumeration

CWE-74

Related Identifiers

BIT-DISCOURSE-2021-41163

CVE-2021-41163

GHSA-JCJX-PVPC-QGWQ

Affected Products

Discourse

References · 10

• https://github.com/discourse/discourse/commit/fa3c46cf079d28b086fe1025349bb00223a5d5e9 · Patch
• https://nvd.nist.gov/vuln/detail/CVE-2021-41163 · Security Note
• https://osv.dev/vulnerability/CVE-2021-41163 · Vendor Advisory
• https://osv.dev/vulnerability/BIT-discourse-2021-41163 · Vendor Advisory
• https://github.com/discourse/discourse/security/advisories/GHSA-jcjx-pvpc-qgwq · Note
• https://t.me/cvenotify/22418 · Telegram Post
• https://t.me/tomhunter/431 · Telegram Post
• https://t.me/cybersecuritytechnologies/4594 · Telegram Post
• https://t.me/true_secator/2253 · Telegram Post
• https://t.me/nekaspersky/1375 · Telegram Post