Discourse 2.7.8 Security Update

Discourse is prone to multiple vulnerabilities. SPDX-FileCopyrightText: 2021 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only CPE = "cpe:/a:discourse:discourse"; ifdescripti...

CVE-2021-37703

Discourse is an open-source platform for community discussion. In Discourse before versions 2.7.8 and 2.8.0.beta5, a user's read state for a topic such as the last read post number and the notification level is exposed...

CVE-2021-37703

Discourse information exposure CVE-2021-37703 affects Discourse before versions 2.7.8 and 2.8.0.beta5, where a user’s read state for a topic (e.g., last read post number and notification level) is exposed. Consequence: potential disclosure of read-state data. Remediation: upgrade to patched relea...