CVE-2023-49098

CVE-2023-49098 affects the Discourse-Reactions plugin for Discourse. Data about a user’s reaction notifications could be exposed; this was mitigated by patch commit 2c26939. The CVSSv3.1 base metrics from the record are: AV:N/AC:L/PR:L/UI:R/S:U, Confidentiality Impact: Low, Integrity/Availability...

Discourse Access Control Error Vulnerability

Discourse is an open source community discussion platform. The platform includes features such as communities, email, and chat rooms. An access control error vulnerability exists in versions prior to Discourse-reactions 2c26939, which stems from allowing users to add their eaction to a post, wher...