Skip to content
CVE PROGRAM SOURCE RECORD3.5 Low

CVE-2023-36466

Topic Title Validation Skipped When Changing Category in Discourse

Read JSON ↗CVE.org ↗
Status
Published
Published
Updated
Assigning organization
GitHub_M

Description

Discourse is an open source discussion platform. When editing a topic, there is a vulnerability that enables a user to bypass the topic title validations for things like title length, number of emojis in title and blank topic titles. The issue is patched in the latest stable, beta and tests-passed version of Discourse.

Affected products

Version statuses are supplied by the assigning organization. Consult the original record for detailed ranges and platform conditions.

discourse discourse

  • stable < 3.0.5affected
  • beta < 3.1.0.beta6affected
  • tests-passed < 3.1.0.beta6affected

References