VYPR
← All advisories
Medium severity4.3NVD Advisory· Published Apr 19, 2023· Updated Jun 17, 2026

CVE-2023-30611

CVE-2023-30611

Description

Discourse-reactions is a plugin that allows user to add their reactions to the post in the Discourse messaging platform. In affected versions data about what reactions were performed on a post in a private topic could be leaked. This issue has been addressed in version 0.3. Users are advised to upgrade. Users unable to upgrade should disable the discourse-reactions plugin to fully mitigate the issue.

AI Insight

LLM-synthesized narrative grounded in this CVE's description and references.

Affected products

3
  • Discourse (software)/Reactionscpe-rescue3 versions
    >= 0.2, < 0.3+ 2 more
    • (no CPE)range: >= 0.2, < 0.3
    • (no CPE)range: <0.3
    • cpe:2.3:a:discourse:reactions:0.2:*:*:*:*:*:*:*

Patches

Vulnerability mechanics

References

2

News mentions

0

No linked articles in our index yet.