Vulnerability Description
Discourse is an open-source discussion platform. Prior to version 3.0.1 of the `stable` branch and version 3.1.0.beta2 of the `beta` and `tests-passed` branches, the count of topics displayed for a tag is a count of all regular topics regardless of whether the topic is in a read restricted category or not. As a result, any users can technically poll a sensitive tag to determine if a new topic is created in a category which the user does not have excess to. In version 3.0.1 of the `stable` branch and version 3.1.0.beta2 of the `beta` and `tests-passed` branches, the count of topics displayed for a tag defaults to only counting regular topics which are not in read restricted categories. Staff users will continue to see a count of all topics regardless of the topic's category read restrictions.
CVSS Score
MEDIUM
Affected Products
| Vendor | Product | Versions |
|---|---|---|
| Discourse | Discourse | < 3.0.0 |
Related Weaknesses (CWE)
References
- https://github.com/discourse/discourse/commit/105fee978d73b0ec23ff814a09d1c0c9acPatch
- https://github.com/discourse/discourse/commit/ecb9aa5dba94741d9579f4f873f0675f48Patch
- https://github.com/discourse/discourse/pull/20004Issue TrackingPatch
- https://github.com/discourse/discourse/pull/20005Issue Tracking
- https://github.com/discourse/discourse/security/advisories/GHSA-2wvr-4x7w-v795Vendor Advisory
- https://github.com/discourse/discourse/commit/105fee978d73b0ec23ff814a09d1c0c9acPatch
- https://github.com/discourse/discourse/commit/ecb9aa5dba94741d9579f4f873f0675f48Patch
- https://github.com/discourse/discourse/pull/20004Issue TrackingPatch
- https://github.com/discourse/discourse/pull/20005Issue Tracking
- https://github.com/discourse/discourse/security/advisories/GHSA-2wvr-4x7w-v795Vendor Advisory
FAQ
What is CVE-2023-23622?
CVE-2023-23622 is a vulnerability with a CVSS score of 4.3 (MEDIUM). Discourse is an open-source discussion platform. Prior to version 3.0.1 of the `stable` branch and version 3.1.0.beta2 of the `beta` and `tests-passed` branches, the count of topics displayed for a ta...
How severe is CVE-2023-23622?
CVE-2023-23622 has been rated MEDIUM with a CVSS base score of 4.3/10. Review the CVSS metrics above for detailed severity breakdown.
Is there a patch for CVE-2023-23622?
Check the references section above for vendor advisories and patch information. Affected products include: Discourse Discourse.