5 matches found
BIT-DISCOURSE-2022-23546 Discourse vulnerable to private topic leak via email#send_digest
In version 2.9.0.beta14 of Discourse, an open-source discussion platform, maliciously embedded urls can leak an admin's digest of recent topics, possibly exposing private information. A patch is available for version 2.9.0.beta15. There are no known workarounds for this issue...
5.5CVSS5.5AI score0.0028EPSS
SaveExploits0References3
20