Prior to version 3.1.1 of Discourse, a user could cause denial of service by adding a carefully crafted 2FA or security key. Patched in version 3.1.1
Reporter | Title | Published | Views | Family All 8 |
---|---|---|---|---|
![]() | CVE-2023-40588 Discourse DoS via 2FA and Security Key Names | 15 Sep 202319:23 | – | vulnrichment |
![]() | Design/Logic Flaw | 15 Sep 202320:15 | – | prion |
![]() | CVE-2023-40588 Discourse DoS via 2FA and Security Key Names | 15 Sep 202319:23 | – | cvelist |
![]() | CVE-2023-40588 | 15 Sep 202320:15 | – | cve |
![]() | CVE-2023-40588 | 15 Sep 202320:15 | – | osv |
![]() | BIT-DISCOURSE-2023-40588 Discourse DoS via 2FA and Security Key Names | 6 Mar 202410:54 | – | osv |
![]() | Discourse < 3.1.1 Multiple DoS Vulnerabilities | 18 Sep 202300:00 | – | openvas |
![]() | Discourse 3.1.x - 3.1.0.beta8 Multiple DoS Vulnerabilities | 21 Apr 202300:00 | – | openvas |
Transform Your Security Services
Elevate your offerings with Vulners' advanced Vulnerability Intelligence. Contact us for a demo and discover the difference comprehensive, actionable intelligence can make in your security strategy.
Book a live demo