English version →
カテゴリ
CVE-2023-45816

Unread bookmark reminder notifications that the user cannot access can be seen

概要

Unread bookmark reminder notifications that the user cannot access can be seen

原文の説明

取得元が公開している説明をそのまま載せています (多くは英語)。

Discourse is an open source platform for community discussion. Prior to version 3.1.3 of the stable branch and version 3.2.0.beta3 of the beta and tests-passed branches, there is an edge case where a bookmark reminder is sent and an unread notification is generated, but the underlying bookmarkable (e.g. post, topic, chat message) security has changed, making it so the user can no longer access the underlying resource. As of version 3.1.3 of the stable branch and version 3.2.0.beta3 of the beta and tests-passed branches, bookmark reminders are now no longer sent if the user does not have access to the underlying bookmarkable, and also the unread bookmark notifications are always filtered by access. There are no known workarounds.

出典: OSV.dev (Open Source Vulnerabilities) NVD GitHub Advisory OSV

影響パッケージ

Bitnami discourse
[{"type":"SEMVER","events":[{"introduced":"0"},{"fixed":"3.2.0"}]}]

参照URL

当サイトでは、アクセス解析と広告の効果測定のために Cookie を使います。株式会社Game のサイト共通の設定です。 詳しく