Categories
CVE-2023-32301

Discourse's canonical url not being used for topic embeddings

Summary

Discourse's canonical url not being used for topic embeddings

Original description

The description as published by the source.

Discourse is an open source discussion platform. Prior to version 3.0.4 of the stable branch and version 3.1.0.beta5 of the beta and tests-passed branches, multiple duplicate topics could be created if topic embedding is enabled. This issue is patched in version 3.0.4 of the stable branch and version 3.1.0.beta5 of the beta and tests-passed branches. As a workaround, disable topic embedding if it has been enabled.

Source: OSV.dev (Open Source Vulnerabilities) NVD GitHub Advisory OSV

Affected packages

Bitnami discourse
[{"type":"SEMVER","events":[{"introduced":"0"},{"fixed":"3.0.4"}]}]

References

We use cookies for analytics and ad measurement. This setting applies to all Game co., Ltd. sites. Details