Skip to content
OpenAdvisories
Medium · 4.3 CVE-2021-43793 EUVD-2021-30689

Bypass of Poll voting limits in Discourse

Published Dec 1, 2021 · Updated Aug 4, 2024 · Assigned by GitHub_M

Description

Discourse is an open source discussion platform. In affected versions a vulnerability in the Polls feature allowed users to vote multiple times in a single-option poll. The problem is patched in the latest tests-passed, beta and stable versions of Discourse

Affected products

VendorProductAffectedFixed
discourse discourse stable < 2.7.11, tests-passed < 2.8.0.beta9 —

References