CVE-2024-52589

discourse/discourse

on github

Published

Dec 19, 2024

Severity

CVSS v3:

N/A

CVSS v2:

N/A

Description

Discourse is an open source platform for community discussion. Moderators can see the Screened emails list in the admin dashboard, and through that can learn the email of a user. This problem is patched in the latest version of Discourse. Users unable to upgrade should remove moderator role from untrusted users.

References

https://github.com/discourse/discourse/security/advisories/GHSA-cqw6-rr3v-8fff

Configurations

CPE23	Version Start	Version End	Exact Version

External Links

NVD - CVE-2024-52589