CVE-2024-52589
Moderators can view Screened emails even when the “moderators view emails” option is disabled in Discourse
概要
Moderators can view Screened emails even when the “moderators view emails” option is disabled in Discourse
原文の説明
取得元が公開している説明をそのまま載せています (多くは英語)。
Discourse is an open source platform for community discussion. Moderators can see the Screened emails list in the admin dashboard, and through that can learn the email of a user. This problem is patched in the latest version of Discourse. Users unable to upgrade should remove moderator role from untrusted users.
出典: OSV.dev (Open Source Vulnerabilities) NVD GitHub Advisory OSV
影響パッケージ
Bitnami
discourse
[{"type":"SEMVER","events":[{"introduced":"0"},{"fixed":"3.3.3"}]}]
参照URL
- advisory github.com
- web nvd.nist.gov