CVE-2023-47119
CVSS V2 None
CVSS V3 None
Description
Discourse is an open source platform for community discussion. Prior to version 3.1.3 of the `stable` branch and version 3.2.0.beta3 of the `beta` and `tests-passed` branches, some links can inject arbitrary HTML tags when rendered through our Onebox engine. The issue is patched in version 3.1.3 of the `stable` branch and version 3.2.0.beta3 of the `beta` and `tests-passed` branches. There are no known workarounds.
Overview
- CVE ID
- CVE-2023-47119
- Assigner
- GitHub_M
- Vulnerability Status
- PUBLISHED
- Published Version
- 2023-11-10T15:00:38.158Z
- Last Modified Date
- 2023-11-10T15:09:38.992Z
Weakness Enumerations
References
| Reference URL | Reference Tags |
|---|---|
| https://github.com/discourse/discourse/security/advisories/GHSA-j95w-5hvx-jp5w | x_refsource_CONFIRM |
| https://github.com/discourse/discourse/commit/628b293ff53fb617b3464dd27268aec84388cc09 | x_refsource_MISC |
| https://github.com/discourse/discourse/commit/d78357917c6a917a8a27af68756228e89c69321c | x_refsource_MISC |
Sources
| Source Name | Source URL |
|---|---|
| NIST | https://nvd.nist.gov/vuln/detail/CVE-2023-47119 |
| MITRE | https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-47119 |
History
| Created | Old Value | New Value | Data Type | Notes |
|---|---|---|---|---|
| 2024-06-25 09:25:15 | Added to TrackCVE |