Skip to content
OpenAdvisories

Product · Discourse

discourse-assign

1 known vulnerabilities.

All Critical High Medium Low Exploited only Public exploit

1 result · Clear filters · Feed

  • Medium 4.3
    CVE-2022-24866

    Exposure of Sensitive Information to an Unauthorized Actor in Discourse Assign

    Discourse Assign is a plugin for assigning users to a topic in Discourse, an open-source messaging platform. Prior to version 1.0.1, the UserBookmarkSerializer serialized the whole User / Group object, which leaked some private information. The data was only …

    Discourse discourse-assign