Security Advisory

CVE-2022-23546

CVE vulnerability detail - eXtreme Datacenter Security Operations

Published 2023-01-05 18:10:08
Last updated 2025-03-10 21:32:03
Assigner GitHub_M
CVSS score 5.5
State PUBLISHED

Description

In version 2.9.0.beta14 of Discourse, an open-source discussion platform, maliciously embedded urls can leak an admin's digest of recent topics, possibly exposing private information. A patch is available for version 2.9.0.beta15. There are no known workarounds for this issue.