VYPR
← All advisories
Medium severity5.3NVD Advisory· Published Aug 1, 2022· Updated Jun 17, 2026

CVE-2022-31182

CVE-2022-31182

Description

Discourse is the an open source discussion platform. In affected versions a maliciously crafted request for static assets could cause error responses to be cached by Discourse's default NGINX proxy configuration. A corrected NGINX configuration is included in the latest stable, beta and tests-passed versions of Discourse. Users are advised to upgrade. There are no known workarounds for this vulnerability.

AI Insight

LLM-synthesized narrative grounded in this CVE's description and references.

Affected products

5
  • Discourse (software)/Discourse4 versions
    cpe:2.3:a:discourse:discourse:*:*:*:*:*:*:*:*+ 3 more
    • cpe:2.3:a:discourse:discourse:*:*:*:*:*:*:*:*range: <2.8.7
    • cpe:2.3:a:discourse:discourse:2.9.0:beta7:*:*:*:*:*:*
    • (no CPE)
    • (no CPE)range: < 2.8.7
  • osv-coords
    pkg:bitnami/discourse
    Range: < 2.8.7

Patches

Vulnerability mechanics

References

2

News mentions

0

No linked articles in our index yet.