Skip to content
CVE PROGRAM SOURCE RECORD5.3 Medium

CVE-2023-25819

Discourse tags with no visibility are leaking into og:article:tag

Description

Discourse is an open source platform for community discussion. Tags that are normally private are showing in metadata. This affects any site running the `tests-passed` or `beta` branches >= 3.1.0.beta2. The issue is patched in the latest `beta` and `tests-passed` version of Discourse.

Affected products

Version statuses are supplied by the assigning organization. Consult the original record for detailed ranges and platform conditions.

discourse discourse

  • < 3.1.0.beta3affected

References