CVE-2023-28111

creationtimestamp| type| source ---|---|--- 2023-03-17 19:31:49+00:00| seen| https://t.me/cibsecurity/60264...

CVE-2023-28111

CVE-2023-28111 concerns Discourse prior to 3.1.0.beta3 (beta and tests-passed branches), where an attacker can bypass the platform’s SSRF protections for private IPv4 addresses by using an IPv4-mapped IPv6 address. The root cause is a weakness in SSRF filtering that permits IPv4-mapped IPv6 repre...