Lucene search

K
prionPRIOn knowledge basePRION:CVE-2022-46148
HistoryNov 29, 2022 - 5:15 p.m.

Design/Logic Flaw

2022-11-2917:15:00
PRIOn knowledge base
www.prio-n.com
3
discourse
messaging platform
self-xss
vulnerability
patched
latest versions

5.1 Medium

AI Score

Confidence

High

0.001 Low

EPSS

Percentile

22.8%

Discourse is an open-source messaging platform. In versions 2.8.10 and prior on the stable branch and versions 2.9.0.beta11 and prior on the beta and tests-passed branches, users composing malicious messages and navigating to drafts page could self-XSS. This vulnerability can lead to a full XSS on sites which have modified or disabled Discourse’s default Content Security Policy. This issue is patched in the latest stable, beta and tests-passed versions of Discourse.

5.1 Medium

AI Score

Confidence

High

0.001 Low

EPSS

Percentile

22.8%

Related for PRION:CVE-2022-46148