English version →
カテゴリ
CVE-2022-46159

Any authenticated Discourse user can create an unlisted topic

概要

Any authenticated Discourse user can create an unlisted topic

原文の説明

取得元が公開している説明をそのまま載せています (多くは英語)。

Discourse is an open-source discussion platform. In version 2.8.13 and prior on the stable branch and version 2.9.0.beta14 and prior on the beta and tests-passed branches, any authenticated user can create an unlisted topic. These topics, which are not readily available to other users, can take up unnecessary site resources. A patch for this issue is available in the main branch of Discourse. There are no known workarounds available.

出典: OSV.dev (Open Source Vulnerabilities) NVD GitHub Advisory OSV

影響パッケージ

Bitnami discourse
[{"type":"SEMVER","events":[{"introduced":"0"},{"fixed":"2.8.14"}]}]

参照URL

当サイトでは、アクセス解析と広告の効果測定のために Cookie を使います。株式会社Game のサイト共通の設定です。 詳しく