Skip to content
OpenAdvisories
Low · 3.5 CVE-2023-49098 EUVD-2023-53107

Reaction data for user notifications exposed in Discourse-reactions

Published Jan 12, 2024 · Updated Jun 3, 2025 · Assigned by GitHub_M

Description

Discourse-reactions is a plugin that allows user to add their reactions to the post. Data about a user's reaction notifications could be exposed. This vulnerability was patched in commit 2c26939.

Affected products

VendorProductAffectedFixed
discourse discourse-reactions < commit 2c26939 —

References