CVE-2024-52589

Moderators can view Screened emails even when the “moderators view emails” option is disabled in Discourse

Summary

Original description

The description as published by the source.

Discourse is an open source platform for community discussion. Moderators can see the Screened emails list in the admin dashboard, and through that can learn the email of a user. This problem is patched in the latest version of Discourse. Users unable to upgrade should remove moderator role from untrusted users.

Source: OSV.dev (Open Source Vulnerabilities) NVD GitHub Advisory OSV

Affected packages

Bitnami discourse

[{"type":"SEMVER","events":[{"introduced":"0"},{"fixed":"3.3.3"}]}]

References

advisory github.com
web nvd.nist.gov