Unrated severityNVD Advisory· Published Jan 5, 2023· Updated Mar 10, 2025
CVE-2022-23548
CVE-2022-23548
Description
Discourse is an option source discussion platform. Prior to version 2.8.14 on the stable branch and version 2.9.0.beta16 on the beta and tests-passed branches, parsing posts can be susceptible to regular expression denial of service (ReDoS) attacks. This issue is patched in versions 2.8.14 and 2.9.0.beta16. There are no known workarounds.
AI Insight
LLM-synthesized narrative grounded in this CVE's description and references.
Affected products
3<2.8.14, <2.9.0.beta16+ 1 more
- (no CPE)range: <2.8.14, <2.9.0.beta16
- (no CPE)range: < 2.8.14
Patches
Vulnerability mechanics
References
2News mentions
0No linked articles in our index yet.