Discourse is an open source discussion platform. The embeddable comments can be exploited to create new topics as any user but without any clear title or content. This issue is patched in the latest stable, beta and tests-passed versions of Discourse. As a workaround, disable embeddable comments by deleting all embeddable hosts.
History

Mon, 10 Mar 2025 22:15:00 +0000

Type Values Removed Values Added
Metrics ssvc

{'options': {'Automatable': 'yes', 'Exploitation': 'none', 'Technical Impact': 'partial'}, 'version': '2.0.3'}


cve-icon MITRE

Status: PUBLISHED

Assigner: GitHub_M

Published: 2023-02-03T21:57:29.878Z

Updated: 2025-03-10T21:16:16.563Z

Reserved: 2023-01-16T17:07:46.242Z

Link: CVE-2023-23615

cve-icon Vulnrichment

Updated: 2024-08-02T10:35:33.625Z

cve-icon NVD

Status : Modified

Published: 2023-02-03T22:15:12.643

Modified: 2024-11-21T07:46:32.303

Link: CVE-2023-23615

cve-icon Redhat

No data.