Логотип exploitDog
Консоль
Логотип exploitDog

exploitDog

nvd логотип

CVE-2023-31142

Опубликовано: 13 июн. 2023
Источник: nvd
CVSS3: 2
CVSS3: 5.3
EPSS Низкий

Описание

Discourse is an open source discussion platform. Prior to version 3.0.4 of the stable branch and version 3.1.0.beta5 of the beta and tests-passed branches, if a site has modified their general category permissions, they could be set back to the default. This issue is patched in version 3.0.4 of the stable branch and version 3.1.0.beta5 of the beta and tests-passed branches. A workaround, only if you are modifying the general category permissions, is to use a new category for the same purpose.

Уязвимые конфигурации

Конфигурация 1

Одно из

cpe:2.3:a:discourse:discourse:*:*:*:*:stable:*:*:*
Версия до 3.0.4 (исключая)
cpe:2.3:a:discourse:discourse:3.1.0:beta1:*:*:beta:*:*:*
cpe:2.3:a:discourse:discourse:3.1.0:beta2:*:*:beta:*:*:*
cpe:2.3:a:discourse:discourse:3.1.0:beta3:*:*:beta:*:*:*
cpe:2.3:a:discourse:discourse:3.1.0:beta4:*:*:beta:*:*:*

EPSS

Процентиль: 29%
0.00104
Низкий

2 Low

CVSS3

5.3 Medium

CVSS3

Дефекты

CWE-732

EPSS

Процентиль: 29%
0.00104
Низкий

2 Low

CVSS3

5.3 Medium

CVSS3

Дефекты

CWE-732