CVE-2023-47121

Name of the Vulnerable Software and Affected Versions Discourse versions prior to 3.1.3 Discourse version 3.2.0.beta3 and earlier in the beta and tests-passed branches

Description Discourse is an open source platform for community discussion. The embedding feature is susceptible to server side request forgery. As a workaround, disable the Embedding feature.

Recommendations For versions prior to 3.1.3, update to version 3.1.3 or later. For version 3.2.0.beta3 and earlier in the beta and tests-passed branches, update to version 3.2.0.beta3 or later. As a temporary workaround, consider disabling the Embedding feature until a patch is available.