CVE-2020-24327

Server Side Request Forgery (SSRF) vulnerability exists in Discourse 2.3.2 and 2.6 via the email function. When writing an email in an editor, you can...

Original description

The description as published by the source.

Server Side Request Forgery (SSRF) vulnerability exists in Discourse 2.3.2 and 2.6 via the email function. When writing an email in an editor, you can upload pictures of remote websites.

Source: OSV.dev (Open Source Vulnerabilities) NVD OSV

Affected packages

Bitnami discourse

[{"type":"SEMVER","events":[{"introduced":"2.3.2"},{"fixed":"2.3.3"},{"introduced":"2.6.0"},{"fixed":"2.6.1"}]}]

References

advisory github.com
advisory github.com
web nvd.nist.gov