Описание
Discourse is an open source discussion platform. In affected versions a malicious user can cause a regular expression denial of service using a carefully crafted git URL. This issue is patched in the latest stable, beta and tests-passed versions of Discourse. Users are advised to upgrade. There are no known workarounds for this issue.
Ссылки
- Patch
- Vendor Advisory
- Patch
- Vendor Advisory
Уязвимые конфигурации
Конфигурация 1Версия до 3.0.1 (исключая)
Одно из
cpe:2.3:a:discourse:discourse:*:*:*:*:*:*:*:*
cpe:2.3:a:discourse:discourse:3.1.0:beta1:*:*:beta:*:*:*
EPSS
Процентиль: 72%
0.00702
Низкий
6.5 Medium
CVSS3
5.7 Medium
CVSS3
Дефекты
CWE-1333
EPSS
Процентиль: 72%
0.00702
Низкий
6.5 Medium
CVSS3
5.7 Medium
CVSS3
Дефекты
CWE-1333