CVE-2023-49098

CVSS V2 None CVSS V3 None

Description

Discourse-reactions is a plugin that allows user to add their reactions to the post. Data about a user's reaction notifications could be exposed. This vulnerability was patched in commit 2c26939.

Overview

CVE ID
CVE-2023-49098

Assigner
GitHub_M

Vulnerability Status
PUBLISHED

Published Version
2024-01-12T20:37:26.516Z

Last Modified Date
2024-01-12T20:37:26.516Z

Weakness Enumerations

CWE	URL
CWE-284	http://cwe.mitre.org/data/definitions/284.html

References

Reference URL	Reference Tags
https://github.com/discourse/discourse-reactions/security/advisories/GHSA-mq82-7v5x-rhv8	x_refsource_CONFIRM
https://github.com/discourse/discourse-reactions/commit/2c26939395177730e492640d71aac68423be84fc	x_refsource_MISC

Sources

Source Name	Source URL
NIST	https://nvd.nist.gov/vuln/detail/CVE-2023-49098
MITRE	https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-49098

History

Created	Old Value	New Value	Data Type	Notes
2024-06-25 12:45:24				Added to TrackCVE