Логотип exploitDog
Консоль
Логотип exploitDog

exploitDog

nvd логотип

CVE-2022-39232

Опубликовано: 29 сент. 2022
Источник: nvd
CVSS3: 6.5
CVSS3: 4.3
EPSS Низкий

Описание

Discourse is an open source discussion platform. Starting with version 2.9.0.beta5 and prior to version 2.9.0.beta10, an incomplete quote can generate a JavaScript error which will crash the current page in the browser in some cases. Version 2.9.0.beta10 added a fix and tests to ensure incomplete quotes won't break the app. As a workaround, the quote can be fixed via the rails console.

Уязвимые конфигурации

Конфигурация 1

Одно из

cpe:2.3:a:discourse:discourse:2.9.0:beta5:*:*:*:*:*:*
cpe:2.3:a:discourse:discourse:2.9.0:beta6:*:*:*:*:*:*
cpe:2.3:a:discourse:discourse:2.9.0:beta7:*:*:*:*:*:*
cpe:2.3:a:discourse:discourse:2.9.0:beta8:*:*:*:*:*:*
cpe:2.3:a:discourse:discourse:2.9.0:beta9:*:*:*:*:*:*

EPSS

Процентиль: 68%
0.00573
Низкий

6.5 Medium

CVSS3

4.3 Medium

CVSS3

Дефекты

CWE-20
NVD-CWE-Other

EPSS

Процентиль: 68%
0.00573
Низкий

6.5 Medium

CVSS3

4.3 Medium

CVSS3

Дефекты

CWE-20
NVD-CWE-Other