Lucene search

K
osvGoogleOSV:CVE-2022-46148
HistoryNov 29, 2022 - 5:15 p.m.

CVE-2022-46148

2022-11-2917:15:11
Google
osv.dev
1
discourse
messaging platform
xss
vulnerability
content security policy

AI Score

5.9

Confidence

High

EPSS

0.001

Percentile

22.8%

Discourse is an open-source messaging platform. In versions 2.8.10 and prior on the stable branch and versions 2.9.0.beta11 and prior on the beta and tests-passed branches, users composing malicious messages and navigating to drafts page could self-XSS. This vulnerability can lead to a full XSS on sites which have modified or disabled Discourse’s default Content Security Policy. This issue is patched in the latest stable, beta and tests-passed versions of Discourse.

AI Score

5.9

Confidence

High

EPSS

0.001

Percentile

22.8%

Related for OSV:CVE-2022-46148