Banner topic data is exposed on login-required Discourse sites
Résumé
Banner topic data is exposed on login-required Discourse sites
Description d'origine
La description telle que publiée par la source (souvent en anglais).
Discourse is an open-source discussion platform. Prior to version 2.8.4 in the stable branch and version 2.9.0.beta5 in the beta and tests-passed branches, banner topic data is exposed on login-required sites. This issue is patched in version 2.8.4 in the stable branch and version 2.9.0.beta5 in the beta and tests-passed branches of Discourse. As a workaround, one may disable banners.
Source: OSV.dev (Open Source Vulnerabilities) NVD GitHub Advisory OSV
Paquets affectés
Références
- advisory github.com
- advisory github.com
- advisory github.com
- web nvd.nist.gov