Skip to content

Tags with no visibility are leaking into og:article:tag

Moderate
jomaxro published GHSA-xx2h-mwm7-hq6q Mar 1, 2023

Package

Discourse (Discourse)

Affected versions

beta <= 3.1.0.beta3; tests-passed <= 3.1.0.beta3

Patched versions

beta >= 3.1.0.beta3; tests-passed >= 3.1.0.beta3

Description

Impact

Tags that are normally private are showing in metadata. This affects any site running the tests-passed or beta branches >= 3.1.0.beta2.

Patches

The issue is patched in the latest beta and tests-passed version of Discourse.

Workarounds

None.

Severity

Moderate
5.3
/ 10

CVSS base metrics

Attack vector
Network
Attack complexity
Low
Privileges required
None
User interaction
None
Scope
Unchanged
Confidentiality
Low
Integrity
None
Availability
None
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N

CVE ID

CVE-2023-25819

Weaknesses

No CWEs