VYPR

Assign

by Discourse (software)

CVEs (1)

  • CVE-2022-24866MedApr 26, 2022
    risk 0.00cvss 4.3epss 0.01

    Discourse Assign is a plugin for assigning users to a topic in Discourse, an open-source messaging platform. Prior to version 1.0.1, the UserBookmarkSerializer serialized the whole User / Group object, which leaked some private information. The data was only being serialized to…