CVE-2023-38706
Discourse vulnerable to DoS via drafts
概要
Discourse vulnerable to DoS via drafts
原文の説明
取得元が公開している説明をそのまま載せています (多くは英語)。
Discourse is an open-source discussion platform. Prior to version 3.1.1 of the stable branch, a malicious user can create an unlimited number of drafts with very long draft keys which may end up exhausting the resources on the server. The issue is patched in version 3.1.1 of the stable branch. There are no known workarounds.
出典: OSV.dev (Open Source Vulnerabilities) NVD GitHub Advisory OSV
影響パッケージ
Bitnami
discourse
[{"type":"SEMVER","events":[{"introduced":"0"},{"fixed":"3.1.1"}]}]
参照URL
- advisory github.com
- web nvd.nist.gov