Логотип exploitDog
Консоль
Логотип exploitDog

exploitDog

nvd логотип

CVE-2023-47121

Опубликовано: 10 нояб. 2023
Источник: nvd
CVSS3: 3.4
CVSS3: 9.8
EPSS Низкий

Описание

Discourse is an open source platform for community discussion. Prior to version 3.1.3 of the stable branch and version 3.2.0.beta3 of the beta and tests-passed branches, the embedding feature is susceptible to server side request forgery. The issue is patched in version 3.1.3 of the stable branch and version 3.2.0.beta3 of the beta and tests-passed branches. As a workaround, disable the Embedding feature.

Уязвимые конфигурации

Конфигурация 1

Одно из

cpe:2.3:a:discourse:discourse:*:*:*:*:stable:*:*:*
Версия до 3.1.3 (исключая)
cpe:2.3:a:discourse:discourse:*:*:*:*:beta:*:*:*
Версия до 3.2.0 (исключая)
cpe:2.3:a:discourse:discourse:3.2.0:beta1:*:*:beta:*:*:*
cpe:2.3:a:discourse:discourse:3.2.0:beta2:*:*:beta:*:*:*

EPSS

Процентиль: 60%
0.00398
Низкий

3.4 Low

CVSS3

9.8 Critical

CVSS3

Дефекты

CWE-918

EPSS

Процентиль: 60%
0.00398
Низкий

3.4 Low

CVSS3

9.8 Critical

CVSS3

Дефекты

CWE-918