CVE-2023-26040

CVSS V2 None CVSS V3 None
Description
Discourse is an open-source discussion platform. Between versions 3.1.0.beta2 and 3.1.0.beta3 of the `tests-passed` branch, editing or responding to a chat message containing malicious content could lead to a cross-site scripting attack. This issue is patched in version 3.1.0.beta3 of the `tests-passed` branch. There are no known workarounds.
Overview
  • CVE ID
  • CVE-2023-26040
  • Assigner
  • security-advisories@github.com
  • Vulnerability Status
  • Analyzed
  • Published Version
  • 2023-03-17T15:15:12
  • Last Modified Date
  • 2023-03-23T19:20:17
CPE Configuration (Product)
CPE Vulnerable Operator Version Start Version End
cpe:2.3:a:discourse:discourse:3.1.0:beta2:*:*:beta:*:*:* 1 OR
History
Created Old Value New Value Data Type Notes
2023-04-17 06:38:51 Added to TrackCVE
2023-04-17 06:38:54 Weakness Enumeration new