Описание
Discourse is an open source platform for community discussion. Users can see topics with a hidden tag if they know the label/name of that tag. This issue has been patched in the latest stable, beta and tests-passed version of Discourse. All users area are advised to upgrade. There are no known workarounds for this vulnerability.
Ссылки
- Vendor Advisory
Уязвимые конфигурации
Конфигурация 1Версия до 3.3.2 (исключая)Версия до 3.4.0 (исключая)
Одно из
cpe:2.3:a:discourse:discourse:*:*:*:*:stable:*:*:*
cpe:2.3:a:discourse:discourse:*:*:*:*:beta:*:*:*
cpe:2.3:a:discourse:discourse:3.4.0:beta1:*:*:beta:*:*:*
EPSS
Процентиль: 56%
0.00344
Низкий
5.3 Medium
CVSS3
4.3 Medium
CVSS3
Дефекты
CWE-269
NVD-CWE-noinfo
EPSS
Процентиль: 56%
0.00344
Низкий
5.3 Medium
CVSS3
4.3 Medium
CVSS3
Дефекты
CWE-269
NVD-CWE-noinfo