PT-2023-19082 · Discourse · Discourse

Jomaxro · Published 2023-03-17 · Updated 2024-03-06 · CVE-2023-23622

Positive Technologies (AI Summary)

CVSS v3.1

4.3

Medium

Base vector

AV:N/AC:L/PR:N/UI:R/S:U/C:L/I:N/A:N

Name of the Vulnerable Software and Affected Versions Discourse versions prior to 3.0.1 of the stable branch Discourse versions prior to 3.1.0.beta2 of the beta and tests-passed branches

Description Discourse is an open-source discussion platform. Prior to version 3.0.1 of the stable branch and version 3.1.0.beta2 of the beta and tests-passed branches, the count of topics displayed for a tag is a count of all regular topics regardless of whether the topic is in a read restricted category or not. As a result, any users can technically poll a sensitive tag to determine if a new topic is created in a category which the user does not have access to. In version 3.0.1 of the stable branch and version 3.1.0.beta2 of the beta and tests-passed branches, the count of topics displayed for a tag defaults to only counting regular topics which are not in read restricted categories. Staff users will continue to see a count of all topics regardless of the topic's category read restrictions.

Recommendations For Discourse versions prior to 3.0.1 of the stable branch, update to version 3.0.1 or later. For Discourse versions prior to 3.1.0.beta2 of the beta and tests-passed branches, update to version 3.1.0.beta2 or later.

Exploit

Fix

Information Disclosure

Weakness Enumeration

CWE-200

Related Identifiers

BIT-DISCOURSE-2023-23622

CVE-2023-23622

GHSA-2WVR-4X7W-V795

Affected Products

Discourse

References · 12

• 🔥 https://github.com/CVEProject/cvelistV5/tree/main/cves/2023/23xxx/CVE-2023-23622.json · Exploit
• https://github.com/discourse/discourse/pull/20004 · Patch
• https://github.com/discourse/discourse/commit/105fee978d73b0ec23ff814a09d1c0c9ace95164 · Patch
• https://github.com/discourse/discourse/commit/ecb9aa5dba94741d9579f4f873f0675f48b4184f · Patch
• https://github.com/discourse/discourse/security/advisories/GHSA-2wvr-4x7w-v795 · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2023-23622 · Security Note
• https://osv.dev/vulnerability/BIT-discourse-2023-23622 · Vendor Advisory
• https://osv.dev/vulnerability/CVE-2023-23622 · Vendor Advisory
• https://github.com/discourse/discourse/pull/20005 · Note
• https://t.me/cibsecurity/60253 · Telegram Post
• https://t.me/cvenotify/46406 · Telegram Post
• https://t.me/cvenotify/46724 · Telegram Post