Lucene search
K

Design/Logic Flaw

๐Ÿ—“๏ธย 16 Oct 2023ย 22:15:00Reported byย PRIOn knowledge baseTypeย 
prion
ย prion
๐Ÿ”—ย www.prio-n.com๐Ÿ‘ย 18ย Views

Discourse platform has a design/logic flaw allowing unauthenticated access to new chat messages via an unauthenticated POST request to MessageBus, patched in versions 3.1.1 and 3.2.0.beta2. Upgrade recommended

Related
Refs
ReporterTitlePublishedViews
Family
Circl
CVE-2023-45131
17 Oct 202302:32
โ€“circl
CNNVD
Discourse Information Disclosure Vulnerability
16 Oct 202300:00
โ€“cnnvd
CVE
CVE-2023-45131
16 Oct 202321:24
โ€“cve
Cvelist
CVE-2023-45131 Unauthenticated access to new private chat messages in Discourse
16 Oct 202321:24
โ€“cvelist
Exploit DB
Discourse 3.1.1 - Unauthenticated Chat Message Access
22 Jul 202500:00
โ€“exploitdb
EUVD
EUVD-2023-49450
3 Oct 202520:07
โ€“euvd
NVD
CVE-2023-45131
16 Oct 202322:15
โ€“nvd
OpenVAS
Discourse 3.1.x <= 3.1.1, 3.2.0.beta1 Unauthorized Access Vulnerability
23 Oct 202300:00
โ€“openvas
OSV
BIT-2023-45131
20 Oct 202306:16
โ€“osv
OSV
BIT-DISCOURSE-2023-45131 Unauthenticated access to new private chat messages in Discourse
6 Mar 202410:53
โ€“osv
Rows per page

Data

Build on a solid foundation withย Vulners data

Weย provide theย essential building blocks forย cybersecurity solutions withย comprehensive, structured, andย constantly updated vulnerability andย exploits data

Api

Power your application withย Vulners API

The Vulners REST API offers reliable, high-performance access toย vulnerabilityย intelligence, withย 99.9%ย SLAย uptime andย CDN-backed data delivery forย seamlessย global access

App

Assess and manage vulnerabilities withย Vulnersย tools

Built on top of Vulners' database and SDK, end-user solutions give security professionals and developers lightweight and powerful tools for vulnerability remediation

19 Oct 2023 17:55Current
7.4High risk
Vulners AI Score7.4
EPSS0.07392
18