CVE-2023-23616: Discourse open-source discussion platform prior to 3.0.1 and 3.1.0.beta2 allows unlimited characters in membership request reasons, potentially leading to database flooding
Reporter | Title | Published | Views | Family All 7 |
---|---|---|---|---|
![]() | CVE-2023-23616 | 28 Jan 202300:15 | – | nvd |
![]() | CVE-2023-23616 | 28 Jan 202300:15 | – | osv |
![]() | BIT-discourse-2023-23616 | 6 Mar 202411:00 | – | osv |
![]() | CVE-2023-23616 Discourse membership requests lack character limit | 27 Jan 202300:00 | – | cvelist |
![]() | Design/Logic Flaw | 28 Jan 202300:15 | – | prion |
![]() | CVE-2023-23616 Discourse membership requests lack character limit | 27 Jan 202300:00 | – | vulnrichment |
![]() | Discourse < 3.0.1 Multiple Vulnerabilities | 27 Jan 202300:00 | – | openvas |
[
{
"vendor": "discourse",
"product": "discourse",
"versions": [
{
"version": "3.1.0.beta1",
"status": "affected"
},
{
"version": "3.0.1",
"status": "affected",
"lessThan": "3.0.1",
"versionType": "custom"
}
]
}
]
Transform Your Security Services
Elevate your offerings with Vulners' advanced Vulnerability Intelligence. Contact us for a demo and discover the difference comprehensive, actionable intelligence can make in your security strategy.
Book a live demo