CVE-2022-39385

🗓️ 14 Nov 2022 21:15:15Reported by GitHub_MType

cve🔗 web.nvd.nist.gov📰️ 4 Media mentions👁 50 Views

Discourse allows unauthorized access to private messages for invited users

AI Insights are available for you today

Leverage the power of AI to quickly understand vulnerabilities, impacts, and exploitability

Reporter	Title	Published	Views	Family All 8
Vulnrichment	CVE-2022-39385 Users erroneously and transparently added to private messages in Discourse	14 Nov 202200:00	–	vulnrichment
OSV	BIT-discourse-2022-39385	6 Mar 202411:03	–	osv
OSV	CVE-2022-39385	14 Nov 202221:15	–	osv
Prion	Information disclosure	14 Nov 202221:15	–	prion
NVD	CVE-2022-39385	14 Nov 202221:15	–	nvd
Cvelist	CVE-2022-39385 Users erroneously and transparently added to private messages in Discourse	14 Nov 202200:00	–	cvelist
OpenVAS	Discourse < 2.9.0.beta12 Multiple Vulnerabilities	17 Nov 202200:00	–	openvas
OpenVAS	Discourse < 2.8.11 Multiple Vulnerabilities	18 Nov 202200:00	–	openvas

Nvd

Vulners

Node

discourse discourseRange<2.8.10

discourse discourseMatch2.9.0beta1

discourse discourseMatch2.9.0beta10

discourse discourseMatch2.9.0beta2

discourse discourseMatch2.9.0beta3

discourse discourseMatch2.9.0beta4

discourse discourseMatch2.9.0beta5

discourse discourseMatch2.9.0beta6

discourse discourseMatch2.9.0beta7

discourse discourseMatch2.9.0beta8

[
  {
    "vendor": "discourse",
    "product": "discourse",
    "versions": [
      {
        "version": "Stable: <= 2.8.10",
        "status": "affected"
      },
      {
        "version": "Beta: <= 2.9.0.beta11",
        "status": "affected"
      }
    ]
  }
]

Source	Link
github	www.github.com/discourse/discourse/commit/a414520742da8dc9dc976d4fb7b72dbd445813bb
github	www.github.com/discourse/discourse/security/advisories/GHSA-gh5r-j595-qx48

Transform Your Security Services

Elevate your offerings with Vulners' advanced Vulnerability Intelligence. Contact us for a demo and discover the difference comprehensive, actionable intelligence can make in your security strategy.

Book a live demo

14 Nov 2022 21:15Current

6.3Medium risk

Vulners AI Score6.3

CVSS36.5

EPSS0.00071

SSVC