Lucene search
+L

5 matches found

OSV
OSV
•added 2024/03/06 11:07 a.m.•64 views

BIT-DISCOURSE-2022-23546 Discourse vulnerable to private topic leak via email#send_digest

In version 2.9.0.beta14 of Discourse, an open-source discussion platform, maliciously embedded urls can leak an admin's digest of recent topics, possibly exposing private information. A patch is available for version 2.9.0.beta15. There are no known workarounds for this issue...

5.5CVSS5.5AI score0.0028EPSS
SaveExploits0References3
Rows per page
Query Builder