CVE-2022-31060
Banner topic data is exposed on login-required Discourse sites
概要
Banner topic data is exposed on login-required Discourse sites
原文の説明
取得元が公開している説明をそのまま載せています (多くは英語)。
Discourse is an open-source discussion platform. Prior to version 2.8.4 in the stable branch and version 2.9.0.beta5 in the beta and tests-passed branches, banner topic data is exposed on login-required sites. This issue is patched in version 2.8.4 in the stable branch and version 2.9.0.beta5 in the beta and tests-passed branches of Discourse. As a workaround, one may disable banners.
出典: OSV.dev (Open Source Vulnerabilities) NVD GitHub Advisory OSV
影響パッケージ
Bitnami
discourse
[{"type":"SEMVER","events":[{"introduced":"0"},{"fixed":"2.8.4"}]}]
参照URL
- advisory github.com
- advisory github.com
- advisory github.com
- web nvd.nist.gov