CVE-2023-22489

Flarum is a discussion platform for websites. If the first post of a discussion is permanently deleted but the discussion stays visible, any actor who can view the discussion is able to create a new reply via the REST API, no matter the reply permission or lock status. This includes users that...

CVE-2023-22489

Flarum is a discussion platform for websites. If the first post of a discussion is permanently deleted but the discussion stays visible, any actor who can view the discussion is able to create a new reply via the REST API, no matter the reply permission or lock status. This includes users that...

CVE-2023-22489

CVE-2023-22489 affects Flarum, a discussion platform. When the first post of a discussion is permanently deleted but the discussion remains visible, any user who can view the discussion can create a new reply via the REST API, regardless of reply permissions or lock status. This affects users inc...