Description
Discourse is the an open source discussion platform. In affected versions an email activation route can be abused to send mass spam emails. A fix has been included in the latest stable, beta and tests-passed versions of Discourse which rate limits emails. Users are advised to upgrade. Users unable to upgrade should manually rate limit email.
Affected products
| Vendor | Product | Affected | Fixed |
|---|---|---|---|
| discourse | discourse | < 2.8.7, < 2.9.0.beta8 | — |