Discourse is an open source discussion platform. The embeddable comments can be exploited to create new topics as any user but without any clear title or content. This issue is patched in the latest stable, beta and tests-passed versions of Discourse. As a workaround, disable embeddable comments by deleting all embeddable hosts.
History

No history.

cve-icon MITRE

Status: PUBLISHED

Assigner: GitHub_M

Published: 2023-02-03T21:57:29.878Z

Updated: 2024-08-02T10:35:33.625Z

Reserved: 2023-01-16T17:07:46.242Z

Link: CVE-2023-23615

cve-icon Vulnrichment

No data.

cve-icon NVD

Status : Analyzed

Published: 2023-02-03T22:15:12.643

Modified: 2023-02-14T15:46:35.163

Link: CVE-2023-23615

cve-icon Redhat

No data.