Lucene search

K
prionPRIOn knowledge basePRION:CVE-2023-23615
HistoryFeb 03, 2023 - 10:15 p.m.

Design/Logic Flaw

2023-02-0322:15:00
PRIOn knowledge base
www.prio-n.com
4
discourse
open source
discussion platform
logic flaw
embedded comments
patch
workaround

5.2 Medium

AI Score

Confidence

High

0.001 Low

EPSS

Percentile

27.1%

Discourse is an open source discussion platform. The embeddable comments can be exploited to create new topics as any user but without any clear title or content. This issue is patched in the latest stable, beta and tests-passed versions of Discourse. As a workaround, disable embeddable comments by deleting all embeddable hosts.

5.2 Medium

AI Score

Confidence

High

0.001 Low

EPSS

Percentile

27.1%

Related for PRION:CVE-2023-23615