Discourse < 3.3.3 Backup Disclosure

Discourse versions prior to 3.3.3 are vulnerable to a backup disclosure vulnerability due to improper handling of file downloads in the rails sendfile method. An attacker could exploit this vulnerability to download backup files containing sensitive information, potentially leading to data...