Bypass of Poll voting limits in Discourse (CVE-2021-43793)

Résumé

Bypass of Poll voting limits in Discourse

Description d'origine

La description telle que publiée par la source (souvent en anglais).

Discourse is an open source discussion platform. In affected versions a vulnerability in the Polls feature allowed users to vote multiple times in a single-option poll. The problem is patched in the latest tests-passed, beta and stable versions of Discourse

Source: OSV.dev (Open Source Vulnerabilities) NVD GitHub Advisory OSV

Paquets affectés

Bitnami discourse

[{"type":"SEMVER","events":[{"introduced":"0"},{"fixed":"2.7.11"}]}]

Références

advisory github.com
advisory github.com
advisory github.com
web nvd.nist.gov