PT-2023-22765 · Discourse · Discourse

Ry0Tak · Published 2023-04-18 · Updated 2024-03-06 · CVE-2023-30538

Positive Technologies (AI Summary)

CVSS v3.1

5.4

Medium

Base vector

AV:N/AC:L/PR:N/UI:R/S:U/C:L/I:L/A:N

Name of the Vulnerable Software and Affected Versions Discourse versions prior to the latest stable and tests-passed versions

Description The issue arises from the improper sanitization of SVG files, allowing an attacker to execute arbitrary JavaScript on users' browsers by uploading a crafted SVG file. This can lead to the execution of malicious code.

Recommendations For versions prior to the latest stable and tests-passed versions, upgrade to the latest version. As a temporary workaround, consider enabling CDN handling of uploads and ensure the CDN sanitizes SVG files. Alternatively, disable SVG file uploads by ensuring that the authorized extensions site setting does not include svg, or reset that setting to the default.

Exploit

Fix

XSS

Weakness Enumeration

CWE-79

Related Identifiers

BIT-DISCOURSE-2023-30538

CVE-2023-30538

GHSA-W5MV-4PJF-XJ43

Affected Products

Discourse

References · 7

• 🔥 https://github.com/CVEProject/cvelistV5/tree/main/cves/2023/30xxx/CVE-2023-30538.json · Exploit
• https://osv.dev/vulnerability/BIT-discourse-2023-30538 · Vendor Advisory
• https://osv.dev/vulnerability/CVE-2023-30538 · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2023-30538 · Security Note
• https://github.com/discourse/discourse/security/advisories/GHSA-w5mv-4pjf-xj43 · Note
• https://t.me/cvenotify/49267 · Telegram Post
• https://t.me/cvenotify/48545 · Telegram Post