Логотип exploitDog
Консоль
Логотип exploitDog

exploitDog

nvd логотип

CVE-2024-36113

Опубликовано: 03 июл. 2024
Источник: nvd
CVSS3: 4.9
CVSS3: 6.5
EPSS Низкий

Описание

Discourse is an open-source discussion platform. Prior to version 3.2.3 on the stable branch, version 3.3.0.beta3 on the beta branch, and version 3.3.0.beta4-dev on the tests-passed branch, a rogue staff user could suspend other staff users preventing them from logging in to the site. The issue is patched in version 3.2.3 on the stable branch, version 3.3.0.beta3 on the beta branch, and version 3.3.0.beta4-dev on the tests-passed branch. No known workarounds are available.

Уязвимые конфигурации

Конфигурация 1

Одно из

cpe:2.3:a:discourse:discourse:*:*:*:*:stable:*:*:*
Версия до 3.2.3 (исключая)
cpe:2.3:a:discourse:discourse:*:*:*:*:beta:*:*:*
Версия до 3.3.0 (исключая)
cpe:2.3:a:discourse:discourse:3.3.0:beta1:*:*:beta:*:*:*
cpe:2.3:a:discourse:discourse:3.3.0:beta2:*:*:beta:*:*:*

EPSS

Процентиль: 25%
0.00084
Низкий

4.9 Medium

CVSS3

6.5 Medium

CVSS3

Дефекты

CWE-862
CWE-862

EPSS

Процентиль: 25%
0.00084
Низкий

4.9 Medium

CVSS3

6.5 Medium

CVSS3

Дефекты

CWE-862
CWE-862