Описание
Discourse is an open-source discussion platform. Prior to version 3.2.3 on the stable branch, version 3.3.0.beta3 on the beta branch, and version 3.3.0.beta4-dev on the tests-passed branch, a rogue staff user could suspend other staff users preventing them from logging in to the site. The issue is patched in version 3.2.3 on the stable branch, version 3.3.0.beta3 on the beta branch, and version 3.3.0.beta4-dev on the tests-passed branch. No known workarounds are available.
Ссылки
- Patch
- Patch
- Third Party Advisory
- Patch
- Patch
- Third Party Advisory
Уязвимые конфигурации
Конфигурация 1Версия до 3.2.3 (исключая)Версия до 3.3.0 (исключая)
Одно из
cpe:2.3:a:discourse:discourse:*:*:*:*:stable:*:*:*
cpe:2.3:a:discourse:discourse:*:*:*:*:beta:*:*:*
cpe:2.3:a:discourse:discourse:3.3.0:beta1:*:*:beta:*:*:*
cpe:2.3:a:discourse:discourse:3.3.0:beta2:*:*:beta:*:*:*
EPSS
Процентиль: 25%
0.00084
Низкий
4.9 Medium
CVSS3
6.5 Medium
CVSS3
Дефекты
CWE-862
CWE-862
EPSS
Процентиль: 25%
0.00084
Низкий
4.9 Medium
CVSS3
6.5 Medium
CVSS3
Дефекты
CWE-862
CWE-862