CVE-2023-49099
Discourse secure uploads accessible to guests even when login is required
Résumé
Discourse secure uploads accessible to guests even when login is required
Description d'origine
La description telle que publiée par la source (souvent en anglais).
Discourse is a platform for community discussion. Under very specific circumstances, secure upload URLs associated with posts can be accessed by guest users even when login is required. This vulnerability has been patched in 3.2.0.beta4 and 3.1.4.
Source: OSV.dev (Open Source Vulnerabilities) NVD GitHub Advisory OSV
Paquets affectés
Bitnami
discourse
[{"type":"SEMVER","events":[{"introduced":"0"},{"fixed":"3.1.4"}]}]
Références
- advisory github.com
- patch github.com
- web nvd.nist.gov