CVE-2023-22453

Discourse is an option source discussion platform. Prior to version 2.8.14 on the stable branch and version 3.0.0.beta16 on the beta and tests-passed branches, the number of times a user posted in an arbitrary topic is exposed to unauthorized users through the /u/username.json endpoint. The issue...

CVE-2023-22453

CVE-2023-22453 concerns Discourse where, before version 2.8.14 (stable) and 3.0.0.beta16 (beta/tests-passed), the number of times a user posted in an arbitrary topic was exposed to unauthorized users via the /u/username.json endpoint. The root cause is an information disclosure in the user-post c...