CVE Vulnerabilities

CVE-2023-23622

Published: Mar 17, 2023 | Modified: Nov 07, 2023
CVSS 3.x
4.3
MEDIUM
Source:
NVD
CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:N
CVSS 2.x
RedHat/V2
RedHat/V3
Ubuntu

Discourse is an open-source discussion platform. Prior to version 3.0.1 of the stable branch and version 3.1.0.beta2 of the beta and tests-passed branches, the count of topics displayed for a tag is a count of all regular topics regardless of whether the topic is in a read restricted category or not. As a result, any users can technically poll a sensitive tag to determine if a new topic is created in a category which the user does not have excess to.

In version 3.0.1 of the stable branch and version 3.1.0.beta2 of the beta and tests-passed branches, the count of topics displayed for a tag defaults to only counting regular topics which are not in read restricted categories. Staff users will continue to see a count of all topics regardless of the topics category read restrictions.

Affected Software

Name Vendor Start Version End Version
Discourse Discourse * *
Discourse Discourse 1.1.0 1.1.0
Discourse Discourse 1.1.0 1.1.0
Discourse Discourse 1.1.0 1.1.0
Discourse Discourse 1.1.0 1.1.0
Discourse Discourse 1.1.0 1.1.0
Discourse Discourse 1.1.0 1.1.0
Discourse Discourse 1.1.0 1.1.0
Discourse Discourse 1.1.0 1.1.0
Discourse Discourse 1.1.0 1.1.0
Discourse Discourse 1.2.0 1.2.0
Discourse Discourse 1.2.0 1.2.0
Discourse Discourse 1.2.0 1.2.0
Discourse Discourse 1.2.0 1.2.0
Discourse Discourse 1.2.0 1.2.0
Discourse Discourse 1.2.0 1.2.0
Discourse Discourse 1.2.0 1.2.0
Discourse Discourse 1.2.0 1.2.0
Discourse Discourse 1.2.0 1.2.0
Discourse Discourse 1.3.0 1.3.0
Discourse Discourse 1.3.0 1.3.0
Discourse Discourse 1.3.0 1.3.0
Discourse Discourse 1.3.0 1.3.0
Discourse Discourse 1.3.0 1.3.0
Discourse Discourse 1.3.0 1.3.0
Discourse Discourse 1.3.0 1.3.0
Discourse Discourse 1.3.0 1.3.0
Discourse Discourse 1.3.0 1.3.0
Discourse Discourse 1.3.0 1.3.0
Discourse Discourse 1.3.0 1.3.0
Discourse Discourse 1.4.0 1.4.0
Discourse Discourse 1.4.0 1.4.0
Discourse Discourse 1.4.0 1.4.0
Discourse Discourse 1.4.0 1.4.0
Discourse Discourse 1.4.0 1.4.0
Discourse Discourse 1.4.0 1.4.0
Discourse Discourse 1.4.0 1.4.0
Discourse Discourse 1.4.0 1.4.0
Discourse Discourse 1.4.0 1.4.0
Discourse Discourse 1.4.0 1.4.0
Discourse Discourse 1.4.0 1.4.0
Discourse Discourse 1.4.0 1.4.0
Discourse Discourse 1.5.0 1.5.0
Discourse Discourse 1.5.0 1.5.0
Discourse Discourse 1.5.0 1.5.0
Discourse Discourse 1.5.0 1.5.0
Discourse Discourse 1.5.0 1.5.0
Discourse Discourse 1.5.0 1.5.0
Discourse Discourse 1.5.0 1.5.0
Discourse Discourse 1.5.0 1.5.0
Discourse Discourse 1.5.0 1.5.0
Discourse Discourse 1.5.0 1.5.0
Discourse Discourse 1.5.0 1.5.0
Discourse Discourse 1.5.0 1.5.0
Discourse Discourse 1.5.0 1.5.0
Discourse Discourse 1.5.0 1.5.0
Discourse Discourse 1.5.0 1.5.0
Discourse Discourse 1.6.0 1.6.0
Discourse Discourse 1.6.0 1.6.0
Discourse Discourse 1.6.0 1.6.0
Discourse Discourse 1.6.0 1.6.0
Discourse Discourse 1.6.0 1.6.0
Discourse Discourse 1.6.0 1.6.0
Discourse Discourse 1.6.0 1.6.0
Discourse Discourse 1.6.0 1.6.0
Discourse Discourse 1.6.0 1.6.0
Discourse Discourse 1.6.0 1.6.0
Discourse Discourse 1.6.0 1.6.0
Discourse Discourse 1.6.0 1.6.0
Discourse Discourse 1.7.0 1.7.0
Discourse Discourse 1.7.0 1.7.0
Discourse Discourse 1.7.0 1.7.0
Discourse Discourse 1.7.0 1.7.0
Discourse Discourse 1.7.0 1.7.0
Discourse Discourse 1.7.0 1.7.0
Discourse Discourse 1.7.0 1.7.0
Discourse Discourse 1.7.0 1.7.0
Discourse Discourse 1.7.0 1.7.0
Discourse Discourse 1.7.0 1.7.0
Discourse Discourse 1.7.0 1.7.0
Discourse Discourse 1.8.0 1.8.0
Discourse Discourse 1.8.0 1.8.0
Discourse Discourse 1.8.0 1.8.0
Discourse Discourse 1.8.0 1.8.0
Discourse Discourse 1.8.0 1.8.0
Discourse Discourse 1.8.0 1.8.0
Discourse Discourse 1.8.0 1.8.0
Discourse Discourse 1.8.0 1.8.0
Discourse Discourse 1.8.0 1.8.0
Discourse Discourse 1.8.0 1.8.0
Discourse Discourse 1.8.0 1.8.0
Discourse Discourse 1.8.0 1.8.0
Discourse Discourse 1.8.0 1.8.0
Discourse Discourse 1.9.0 1.9.0
Discourse Discourse 1.9.0 1.9.0
Discourse Discourse 1.9.0 1.9.0
Discourse Discourse 1.9.0 1.9.0
Discourse Discourse 1.9.0 1.9.0
Discourse Discourse 1.9.0 1.9.0
Discourse Discourse 1.9.0 1.9.0
Discourse Discourse 1.9.0 1.9.0
Discourse Discourse 1.9.0 1.9.0
Discourse Discourse 1.9.0 1.9.0
Discourse Discourse 1.9.0 1.9.0
Discourse Discourse 1.9.0 1.9.0
Discourse Discourse 1.9.0 1.9.0
Discourse Discourse 1.9.0 1.9.0
Discourse Discourse 1.9.0 1.9.0
Discourse Discourse 1.9.0 1.9.0
Discourse Discourse 1.9.0 1.9.0
Discourse Discourse 2.0.0 2.0.0
Discourse Discourse 2.0.0 2.0.0
Discourse Discourse 2.0.0 2.0.0
Discourse Discourse 2.0.0 2.0.0
Discourse Discourse 2.0.0 2.0.0
Discourse Discourse 2.0.0 2.0.0
Discourse Discourse 2.0.0 2.0.0
Discourse Discourse 2.0.0 2.0.0
Discourse Discourse 2.0.0 2.0.0
Discourse Discourse 2.0.0 2.0.0
Discourse Discourse 2.1.0 2.1.0
Discourse Discourse 2.1.0 2.1.0
Discourse Discourse 2.1.0 2.1.0
Discourse Discourse 2.1.0 2.1.0
Discourse Discourse 2.1.0 2.1.0
Discourse Discourse 2.1.0 2.1.0
Discourse Discourse 2.2.0 2.2.0
Discourse Discourse 2.2.0 2.2.0
Discourse Discourse 2.2.0 2.2.0
Discourse Discourse 2.2.0 2.2.0
Discourse Discourse 2.2.0 2.2.0
Discourse Discourse 2.2.0 2.2.0
Discourse Discourse 2.2.0 2.2.0
Discourse Discourse 2.2.0 2.2.0
Discourse Discourse 2.2.0 2.2.0
Discourse Discourse 2.2.0 2.2.0
Discourse Discourse 2.3.0 2.3.0
Discourse Discourse 2.3.0 2.3.0
Discourse Discourse 2.3.0 2.3.0
Discourse Discourse 2.3.0 2.3.0
Discourse Discourse 2.3.0 2.3.0
Discourse Discourse 2.3.0 2.3.0
Discourse Discourse 2.3.0 2.3.0
Discourse Discourse 2.3.0 2.3.0
Discourse Discourse 2.3.0 2.3.0
Discourse Discourse 2.3.0 2.3.0
Discourse Discourse 2.3.0 2.3.0
Discourse Discourse 2.4.0 2.4.0
Discourse Discourse 2.4.0 2.4.0
Discourse Discourse 2.4.0 2.4.0
Discourse Discourse 2.4.0 2.4.0
Discourse Discourse 2.4.0 2.4.0
Discourse Discourse 2.4.0 2.4.0
Discourse Discourse 2.4.0 2.4.0
Discourse Discourse 2.4.0 2.4.0
Discourse Discourse 2.4.0 2.4.0
Discourse Discourse 2.4.0 2.4.0
Discourse Discourse 2.4.0 2.4.0
Discourse Discourse 2.5.0 2.5.0
Discourse Discourse 2.5.0 2.5.0
Discourse Discourse 2.5.0 2.5.0
Discourse Discourse 2.5.0 2.5.0
Discourse Discourse 2.5.0 2.5.0
Discourse Discourse 2.5.0 2.5.0
Discourse Discourse 2.5.0 2.5.0
Discourse Discourse 2.6.0 2.6.0
Discourse Discourse 2.6.0 2.6.0
Discourse Discourse 2.6.0 2.6.0
Discourse Discourse 2.6.0 2.6.0
Discourse Discourse 2.6.0 2.6.0
Discourse Discourse 2.6.0 2.6.0
Discourse Discourse 2.7.0 2.7.0
Discourse Discourse 2.7.0 2.7.0
Discourse Discourse 2.7.0 2.7.0
Discourse Discourse 2.7.0 2.7.0
Discourse Discourse 2.7.0 2.7.0
Discourse Discourse 2.7.0 2.7.0
Discourse Discourse 2.7.0 2.7.0
Discourse Discourse 2.7.0 2.7.0
Discourse Discourse 2.7.0 2.7.0
Discourse Discourse 2.8.0 2.8.0
Discourse Discourse 2.8.0 2.8.0
Discourse Discourse 2.8.0 2.8.0
Discourse Discourse 2.8.0 2.8.0
Discourse Discourse 2.8.0 2.8.0
Discourse Discourse 2.8.0 2.8.0
Discourse Discourse 2.8.0 2.8.0
Discourse Discourse 2.8.0 2.8.0
Discourse Discourse 2.8.0 2.8.0
Discourse Discourse 2.8.0 2.8.0
Discourse Discourse 2.8.0 2.8.0
Discourse Discourse 2.9.0 2.9.0
Discourse Discourse 2.9.0 2.9.0
Discourse Discourse 2.9.0 2.9.0
Discourse Discourse 2.9.0 2.9.0
Discourse Discourse 2.9.0 2.9.0
Discourse Discourse 2.9.0 2.9.0
Discourse Discourse 2.9.0 2.9.0
Discourse Discourse 2.9.0 2.9.0
Discourse Discourse 2.9.0 2.9.0
Discourse Discourse 2.9.0 2.9.0
Discourse Discourse 2.9.0 2.9.0
Discourse Discourse 2.9.0 2.9.0
Discourse Discourse 2.9.0 2.9.0
Discourse Discourse 2.9.0 2.9.0
Discourse Discourse 3.0.0 3.0.0
Discourse Discourse 3.0.0 3.0.0

References