Multiple vulnerabilities in Discourse



Risk Low
Patch available YES
Number of vulnerabilities 2
CVE-ID CVE-2022-41921
CVE-2022-41944
CWE-ID CWE-20
CWE-284
Exploitation vector Network
Public exploit N/A
Vulnerable software
 Discourse
Web applications / Forum & blogging software

Vendor Civilized Discourse Construction Kit, Inc.

Security Bulletin

This security bulletin contains information about 2 vulnerabilities.

1) Input validation error

EUVDB-ID: #VU69694

Risk: Low

CVSSv4.0: 0.6 [CVSS:4.0/AV:N/AC:L/AT:P/PR:L/UI:N/VC:N/VI:N/VA:L/SC:N/SI:N/SA:N/E:U/U:Clear]

CVE-ID: CVE-2022-41921

CWE-ID: CWE-20 - Improper input validation

Exploit availability: No

Description

The vulnerability allows a remote user to perform a denial of service (DoS) attack.

The vulnerability exists due to missing limits on the amount of text published by application users. A remote user post a chat message of an unlimited lengt and perform a denial of service (DoS) attack.

Mitigation

Install updates from vendor's website.

Vulnerable software versions

Discourse: 2.9.0 beta1 - 2.9.0 beta12

CPE2.3 External links

https://github.com/discourse/discourse/security/advisories/GHSA-mfh7-6cv6-qccc
https://github.com/discourse/discourse/commit/3de765c89524a526ce611e11468d758a471a933f


Q & A

Can this vulnerability be exploited remotely?

Yes. This vulnerability can be exploited by a remote authenticated user via the Internet.

Is there known malware, which exploits this vulnerability?

No. We are not aware of malware exploiting this vulnerability.

2) Improper access control

EUVDB-ID: #VU69693

Risk: Low

CVSSv4.0: 0.6 [CVSS:4.0/AV:N/AC:L/AT:P/PR:L/UI:N/VC:L/VI:N/VA:N/SC:N/SI:N/SA:N/E:U/U:Clear]

CVE-ID: CVE-2022-41944

CWE-ID: CWE-284 - Improper Access Control

Exploit availability: No

Description

The vulnerability allows a remote user to gain unauthorized access to otherwise restricted functionality.

The vulnerability exists due to improper access restrictions. A remote user can see notifications for topics they no longer have access to.

Mitigation

Install updates from vendor's website.

Vulnerable software versions

Discourse: 2.8.0 beta1 - 2.9.0 beta12

CPE2.3 External links

https://github.com/discourse/discourse/commit/c6ee28ec756436cc9ce154dd2c8e4c441f92f693
https://github.com/discourse/discourse/security/advisories/GHSA-354r-jpj5-53c2


Q & A

Can this vulnerability be exploited remotely?

Yes. This vulnerability can be exploited by a remote authenticated user via the Internet.

Is there known malware, which exploits this vulnerability?

No. We are not aware of malware exploiting this vulnerability.



###SIDEBAR###