Skip to content
CVE PROGRAM SOURCE RECORD6.5 Medium

CVE-2023-36818

Denial of service via User Custom Sidebar Section Unlimited Link Creation in discourse

Description

Discourse is an open source discussion platform. In affected versions a request to create or update custom sidebar section can cause a denial of service. This issue has been patched in commit `52b003d915`. Users are advised to upgrade. There are no known workarounds for this vulnerability.

Affected products

Version statuses are supplied by the assigning organization. Consult the original record for detailed ranges and platform conditions.

discourse discourse

  • = 3.1.0beta5affected

References