PT-2019-11632 · Discourse · Discourse
CVE-2019-1020017
·
Published
2019-07-29
·
Updated
2023-03-03
CVSS v3.1
5.3
Medium
| Vector | AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:N |
Name of the Vulnerable Software and Affected Versions:
Discourse versions prior to 2.3.0
Discourse versions 2.4.x prior to 2.4.0.beta3
Description:
The issue lacks a confirmation screen when logging in via a user-api OTP.
Recommendations:
For versions prior to 2.3.0, update to version 2.3.0 or later.
For versions 2.4.x prior to 2.4.0.beta3, update to version 2.4.0.beta3 or later.
Fix
Found an issue in the description? Have something to add? Feel free to write us 👾
Related Identifiers
Affected Products
Discourse