CVE-2024-21655
Insufficient control of custom field value sizes
Résumé
Insufficient control of custom field value sizes
Description d'origine
La description telle que publiée par la source (souvent en anglais).
Discourse is a platform for community discussion. For fields that are client editable, limits on sizes are not imposed. This allows a malicious actor to cause a Discourse instance to use excessive disk space and also often excessive bandwidth. The issue is patched 3.1.4 and 3.2.0.beta4.
Source: OSV.dev (Open Source Vulnerabilities) NVD GitHub Advisory OSV
Paquets affectés
Bitnami
discourse
[{"type":"SEMVER","events":[{"introduced":"0"},{"fixed":"3.1.4"}]}]
Références
- advisory github.com
- web nvd.nist.gov