CVE-2024-31219

CVSS V2 None CVSS V3 None

Description

Discourse-reactions is a plugin that allows user to add their reactions to the post. When whispers are enabled on a site via `whispers_allowed_groups` and reactions are made on whispers on public topics, the contents of the whisper and the reaction data are shown on the `/u/:username/activity/reactions` endpoint.

Overview

CVE ID
CVE-2024-31219

Assigner
GitHub_M

Vulnerability Status
PUBLISHED

Published Version
2024-04-15T18:00:14.783Z

Last Modified Date
2024-06-04T17:36:49.662Z

Weakness Enumerations

CWE	URL
CWE-200	http://cwe.mitre.org/data/definitions/200.html

References

Reference URL	Reference Tags
https://github.com/discourse/discourse-reactions/security/advisories/GHSA-7cqc-5xrw-xh67	x_refsource_CONFIRM
https://github.com/discourse/discourse-reactions/commit/6a5a8dacd7e5cbbbbe7d2288b1df9c1062994dbe	x_refsource_MISC

Sources

Source Name	Source URL
NIST	https://nvd.nist.gov/vuln/detail/CVE-2024-31219
MITRE	https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-31219

History

Created	Old Value	New Value	Data Type	Notes
2024-06-25 22:41:39				Added to TrackCVE