Skip to content
OpenAdvisories
Medium · 6.5 CVE-2023-36818 EUVD-2023-40748

Denial of service via User Custom Sidebar Section Unlimited Link Creation in discourse

Published Jul 14, 2023 · Updated Oct 18, 2024 · Assigned by GitHub_M

Description

Discourse is an open source discussion platform. In affected versions a request to create or update custom sidebar section can cause a denial of service. This issue has been patched in commit `52b003d915`. Users are advised to upgrade. There are no known workarounds for this vulnerability.

Affected products

VendorProductAffectedFixed
discourse discourse = 3.1.0beta5 —

References