Описание
Discourse is a platform for community discussion. For fields that are client editable, limits on sizes are not imposed. This allows a malicious actor to cause a Discourse instance to use excessive disk space and also often excessive bandwidth. The issue is patched 3.1.4 and 3.2.0.beta4.
Уязвимые конфигурации
Конфигурация 1Версия до 3.1.4 (исключая)
Одно из
cpe:2.3:a:discourse:discourse:*:*:*:*:stable:*:*:*
cpe:2.3:a:discourse:discourse:3.2.0:beta1:*:*:beta:*:*:*
cpe:2.3:a:discourse:discourse:3.2.0:beta2:*:*:beta:*:*:*
cpe:2.3:a:discourse:discourse:3.2.0:beta3:*:*:beta:*:*:*
EPSS
Процентиль: 26%
0.00092
Низкий
4.3 Medium
CVSS3
Дефекты
CWE-400
CWE-770
EPSS
Процентиль: 26%
0.00092
Низкий
4.3 Medium
CVSS3
Дефекты
CWE-400
CWE-770