PT-2022-24835 · Discourse · Discourse

Gregxsunday + 1 · Published 2022-11-02 · Updated 2024-03-06 · CVE-2022-39241

Positive Technologies (AI Summary)

CVSS v3.1

7.6

High

Base vector

AV:N/AC:L/PR:H/UI:N/S:C/C:H/I:L/A:N

Name of the Vulnerable Software and Affected Versions Discourse versions prior to the latest stable, beta, and test-passed versions

Description A malicious admin could exploit this issue to perform port enumeration on the local host or other hosts on the internal network, as well as against hosts on the Internet.

Recommendations For all versions prior to the latest stable, beta, and test-passed versions, update to the latest version to resolve the issue. As a temporary workaround, self-hosters can use the DISCOURSE BLOCKED IP BLOCKS env var to stop webhooks from accessing private IPs.

Exploit

Fix

SSRF

Weakness Enumeration

CWE-918

Related Identifiers

BIT-DISCOURSE-2022-39241

CVE-2022-39241

GHSA-RCC5-28R3-23RR

Affected Products

Discourse

References · 6

• 🔥 https://github.com/CVEProject/cvelistV5/tree/main/cves/2022/39xxx/CVE-2022-39241.json · Exploit
• https://nvd.nist.gov/vuln/detail/CVE-2022-39241 · Security Note
• https://osv.dev/vulnerability/CVE-2022-39241 · Vendor Advisory
• https://osv.dev/vulnerability/BIT-discourse-2022-39241 · Vendor Advisory
• https://github.com/discourse/discourse/security/advisories/GHSA-rcc5-28r3-23rr · Note
• https://t.me/cibsecurity/52485 · Telegram Post