Unrated severityNVD Advisory· Published Oct 7, 2024· Updated Oct 8, 2024
Prevent topic list filtering by hidden tags for unauthorized users in Discourse
CVE-2024-45297
Description
Discourse is an open source platform for community discussion. Users can see topics with a hidden tag if they know the label/name of that tag. This issue has been patched in the latest stable, beta and tests-passed version of Discourse. All users area are advised to upgrade. There are no known workarounds for this vulnerability.
Affected products
1- Range: stable: < 3.3.2
Patches
0No patches discovered yet.
Vulnerability mechanics
AI mechanics synthesis has not run for this CVE yet.
References
1- github.com/discourse/discourse/security/advisories/GHSA-58xw-3qr3-53gpmitrex_refsource_CONFIRM
News mentions
0No linked articles in our index yet.