VULNERABILITY INTELLIGENCE

CVE-2023-49099

CVSS score3.1 LOW
EPSS probability0.32%
CISA KEVNot currently listed
Published2024-01-12
Last modified2026-06-17
CVSS vectorCVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:L/I:N/A:N

Description

Discourse is a platform for community discussion. Under very specific circumstances, secure upload URLs associated with posts can be accessed by guest users even when login is required. This vulnerability has been patched in 3.2.0.beta4 and 3.1.4.

Weakness classification

  • CWE-284: Improper Access Control

Primary references