Catégories
CVE-2022-21678

User's bio visible even if profile is restricted in Discourse

Résumé

User's bio visible even if profile is restricted in Discourse

Description d'origine

La description telle que publiée par la source (souvent en anglais).

Discourse is an open source discussion platform. Prior to version 2.8.0.beta11 in the tests-passed branch, version 2.8.0.beta11 in the beta branch, and version 2.7.13 in the stable branch, the bios of users who made their profiles private were still visible in the `` tags on their users' pages. The problem is patched in tests-passed version 2.8.0.beta11, beta version 2.8.0.beta11, and stable version 2.7.13 of Discourse.

Source: OSV.dev (Open Source Vulnerabilities) NVD GitHub Advisory OSV

Paquets affectés

Bitnami discourse
[{"type":"SEMVER","events":[{"introduced":"0"},{"fixed":"2.7.13"}]}]

Références

Nous utilisons des cookies pour l'analyse d'audience et la mesure publicitaire. Ce réglage s'applique à tous les sites de Game co., Ltd. En savoir plus