CVE-2022-39355

CVE-2022-39355 affects the Discourse Patreon plugin, where an improper authentication flow could allow taking control of a victim’s forum account on sites with Patreon login enabled. The issue is patched in commit 846d012151514b35ce42a1636c7d70f6dcee879e; as a precaution, accounts logged in via u...