CVE-2023-45131

Discourse is an open source platform for community discussion. New chat messages can be read by making an unauthenticated POST request to MessageBus. This issue is patched in the 3.1.1 stable and 3.2.0.beta2 versions of Discourse. Users are advised to upgrade. There are no known workarounds for this vulnerability.

Affected products

Discourse

Discourse

≤ 3.1.1, 3.2.0

Fix

Available

CVSS 3.1

7.5 HIGH

EPSS

1.8% (77th percentile)

Weakness

CWE-200

NVD status

Modified

Published

2023-10-16