Skip to content
CVE PROGRAM SOURCE RECORD4.3 Medium

CVE-2021-43793

Bypass of Poll voting limits in Discourse

Description

Discourse is an open source discussion platform. In affected versions a vulnerability in the Polls feature allowed users to vote multiple times in a single-option poll. The problem is patched in the latest tests-passed, beta and stable versions of Discourse

Affected products

Version statuses are supplied by the assigning organization. Consult the original record for detailed ranges and platform conditions.

discourse discourse

  • stable < 2.7.11affected
  • tests-passed < 2.8.0.beta9affected

References