Any authenticated user can create an unlisted topic
Package
No package listed
Affected versions
stable <= 2.8.13; beta <= 2.9.0.beta14; tests-passed <= 2.9.0.beta14
Patched versions
stable > 2.8.13; beta > 2.9.0.beta14; tests-passed > 2.9.0.beta14
Impact
Any authenticated user can create an unlisted topic. These topics, which are not readily available to other users can take up unnecessary site resources.
Patches
This issue is patched in the latest stable, beta and tests-passed versions of Discourse
Workarounds
There are no workarounds available.