Discourse tags with no visibility are leaking into og:articl…(CVE-2023-25819)

概要

Discourse tags with no visibility are leaking into og:article:tag

原文の説明

取得元が公開している説明をそのまま載せています (多くは英語)。

Discourse is an open source platform for community discussion. Tags that are normally private are showing in metadata. This affects any site running the tests-passed or beta branches >= 3.1.0.beta2. The issue is patched in the latest beta and tests-passed version of Discourse.

出典: OSV.dev (Open Source Vulnerabilities) NVD GitHub Advisory OSV

影響パッケージ

Bitnami discourse

[{"type":"SEMVER","events":[{"introduced":"0"},{"fixed":"3.1.0"}]}]

参照URL

advisory github.com
patch github.com
web nvd.nist.gov