CVE-2022-31060
Banner topic data is exposed on login-required Discourse sites
Summary
Banner topic data is exposed on login-required Discourse sites
Original description
The description as published by the source.
Discourse is an open-source discussion platform. Prior to version 2.8.4 in the stable branch and version 2.9.0.beta5 in the beta and tests-passed branches, banner topic data is exposed on login-required sites. This issue is patched in version 2.8.4 in the stable branch and version 2.9.0.beta5 in the beta and tests-passed branches of Discourse. As a workaround, one may disable banners.
Source: OSV.dev (Open Source Vulnerabilities) NVD GitHub Advisory OSV
Affected packages
Bitnami
discourse
[{"type":"SEMVER","events":[{"introduced":"0"},{"fixed":"2.8.4"}]}]
References
- advisory github.com
- advisory github.com
- advisory github.com
- web nvd.nist.gov