未評価
Client Side Path Traversal using activate account route in Discourse
CVE-2025-22601
SecPulse初出
原文の説明 取得元が公開している説明をそのまま載せています (多くは英語)。
Discourse is an open source platform for community discussion. In affected versions an attacker can trick a target user to make changes to their own username via carefully crafted link using the activate-account route. This problem has been patched in the latest version of Discourse. Users are advised to upgrade. There are no known workarounds for this vulnerability.
出典: OSV.dev (Open Source Vulnerabilities) NVD GitHub Advisory OSV
参照URL
- advisory github.com
- advisory github.com
- advisory nvd.nist.gov