PT-2023-26478

CVE-2023-38498

Publicado

2023-07-28

Atualizado

2024-03-06

Descrição por

CVSS 3.1

4.3

Média

MétricasAV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:L

Name of the Vulnerable Software and Affected Versions Discourse versions prior to 3.0.6 of the stable branch and version 3.1.0.beta7 of the beta and tests-passed branches

Description A malicious user can prevent the defer queue from proceeding promptly on sites hosted in the same multisite installation. The issue affects Discourse, an open source discussion platform. Users of multisite configurations are at risk.

Recommendations For Discourse versions prior to 3.0.6 of the stable branch, upgrade to version 3.0.6. For Discourse versions prior to 3.1.0.beta7 of the beta and tests-passed branches, upgrade to version 3.1.0.beta7.

Explorabilidade

Exploit

Correção

Impactos

Pesquisadores

Jomaxro

Fornecedores

Produtos afetados

Enumeração de fraquezas

CWE-770: Allocation of Resources Without Limits or Throttling

CWE-400: Uncontrolled Resource Consumption

Identificadores relacionados