CVE-2024-52589
Moderators can view Screened emails even when the “moderators view emails” option is disabled in Discourse
Résumé
Moderators can view Screened emails even when the “moderators view emails” option is disabled in Discourse
Description d'origine
La description telle que publiée par la source (souvent en anglais).
Discourse is an open source platform for community discussion. Moderators can see the Screened emails list in the admin dashboard, and through that can learn the email of a user. This problem is patched in the latest version of Discourse. Users unable to upgrade should remove moderator role from untrusted users.
Source: OSV.dev (Open Source Vulnerabilities) NVD GitHub Advisory OSV
Paquets affectés
Bitnami
discourse
[{"type":"SEMVER","events":[{"introduced":"0"},{"fixed":"3.3.3"}]}]
Références
- advisory github.com
- web nvd.nist.gov