CVE-2023-25819

2023-03-0401:15:10

Google

osv.dev

7 High

AI Score

Confidence

Low

0.001 Low

EPSS

Percentile

29.4%

JSON

Discourse is an open source platform for community discussion. Tags that are normally private are showing in metadata. This affects any site running the tests-passed or beta branches >= 3.1.0.beta2. The issue is patched in the latest beta and tests-passed version of Discourse.

CPENameOperatorVersion
discourseeq0.9.8.10
discourseeq2.3.0.beta1
discourseeq1.1.0.beta8
discourseeq1.8.0.beta7
discourseeq2.3.0.beta7
discourseeq2.8.0.beta2
discourseeq0.9.9.1
discourseeq2.8.0.beta9
discourseeq2.9.0.beta10
discourseeq2.3.0.beta8

Name	Operator	Version
discourse	eq	0.9.8.10
discourse	eq	2.3.0.beta1
discourse	eq	1.1.0.beta8
discourse	eq	1.8.0.beta7
discourse	eq	2.3.0.beta7
discourse	eq	2.8.0.beta2
discourse	eq	0.9.9.1
discourse	eq	2.8.0.beta9
discourse	eq	2.9.0.beta10
discourse	eq	2.3.0.beta8