PT-2019-11632 · Discourse · Discourse

CVE-2019-1020017

·

Publicado

2019-07-29

·

Atualizado

2023-03-03

CVSS v3.1

5.3

Média

VetorAV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:N
Name of the Vulnerable Software and Affected Versions: Discourse versions prior to 2.3.0 Discourse versions 2.4.x prior to 2.4.0.beta3
Description: The issue lacks a confirmation screen when logging in via a user-api OTP.
Recommendations: For versions prior to 2.3.0, update to version 2.3.0 or later. For versions 2.4.x prior to 2.4.0.beta3, update to version 2.4.0.beta3 or later.

Correção

Encontrou algum problema na descrição? Tem algo a acrescentar? Fique à vontade para nos escrever 👾
dbugs@ptsecurity.com

Identificadores relacionados

CVE-2019-1020017

Produtos afetados

Discourse