VULNERABILITY INTELLIGENCE

CVE-2022-21642

CVSS score4.3 MEDIUM
EPSS probability0.75%
CISA KEVNot currently listed
Published2022-01-05
Last modified2026-06-17
CVSS vectorCVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:N

Description

Discourse is an open source platform for community discussion. In affected versions when composing a message from topic the composer user suggestions reveals whisper participants. The issue has been patched in stable version 2.7.13 and beta version 2.8.0.beta11. There is no workaround for this issue and users are advised to upgrade.

Weakness classification

  • security-advisories@github.com: CWE-200
  • nvd@nist.gov: CWE-200

Primary references