Design/Logic Flaw

2023-01-2800:15:00

PRIOn knowledge base

www.prio-n.com

open-source discussion platform

design logic flaw

version 3.0.1

version 3.1.0.beta2

restricted tags access

5.2 Medium

AI Score

Confidence

High

0.001 Low

EPSS

Percentile

27.0%

JSON

Discourse is an open-source discussion platform. Prior to version 3.0.1 on the stable branch and 3.1.0.beta2 on the beta and tests-passed branches, the contents of latest/top routes for restricted tags can be accessed by unauthorized users. This issue is patched in version 3.0.1 on the stable branch and 3.1.0.beta2 on the beta and tests-passed branches. There are no known workarounds.

CPENameOperatorVersion
discourselt3.0.1
discourseeq1.1.0 beta1
discourseeq1.1.0 beta2
discourseeq1.1.0 beta3
discourseeq1.1.0 beta4
discourseeq1.1.0 beta5
discourseeq1.1.0 beta6
discourseeq1.1.0 beta6b
discourseeq1.1.0 beta7
discourseeq1.1.0 beta8

Name	Operator	Version
discourse	lt	3.0.1
discourse	eq	1.1.0 beta1
discourse	eq	1.1.0 beta2
discourse	eq	1.1.0 beta3
discourse	eq	1.1.0 beta4
discourse	eq	1.1.0 beta5
discourse	eq	1.1.0 beta6
discourse	eq	1.1.0 beta6b
discourse	eq	1.1.0 beta7
discourse	eq	1.1.0 beta8