CVE-2022-31025
2.6
CVSS:3.1/AV:N/AC:H/PR:L/UI:R/S:U/C:N/I:L/A:N
Summary
Discourse is an open source platform for community discussion. Prior to version 2.8.4 on the stable branch and 2.9.0beta5 on the beta and tests-passed branches, inviting users on sites that use single sign-on could bypass the must_approve_users check and invites by staff are always approved automatically. The issue is patched in Discourse version 2.8.4 on the stable branch and version 2.9.0.beta5 on the beta and tests-passed branches. As a workaround, disable invites or increase min_trust_level_to_allow_invite to reduce the attack surface to more trusted users.
Affected Software
| Vendor | Product | Version Range | Status |
|---|---|---|---|
| discourse | discourse | < 2.8.4 | affected |
| discourse | discourse | >= 2.9.0.beta1, <= 2.9.0.beta4 | affected |
Weaknesses
- CWE-285: CWE-285: Improper Authorization
ADP Enrichment
CVE Program Container
Additional References
- https://github.com/discourse/discourse/security/advisories/GHSA-x7jh-mx5q-6f9q
- https://github.com/discourse/discourse/pull/16974
- https://github.com/discourse/discourse/pull/16984
- https://github.com/discourse/discourse/commit/0fa0094531efc82d9371f90a02aa804b176d59cf
- https://github.com/discourse/discourse/commit/7c4e2d33fa4b922354c177ffc880a2f2701a91f9
CISA ADP Vulnrichment
- SSVC:
- Exploitation: none
- Automatable: no
- Technical Impact: partial
References
- https://github.com/discourse/discourse/security/advisories/GHSA-x7jh-mx5q-6f9q
- https://github.com/discourse/discourse/pull/16974
- https://github.com/discourse/discourse/pull/16984
- https://github.com/discourse/discourse/commit/0fa0094531efc82d9371f90a02aa804b176d59cf
- https://github.com/discourse/discourse/commit/7c4e2d33fa4b922354c177ffc880a2f2701a91f9
Feedback
Was this page helpful?
Glad to hear it! Please tell us how we can improve.
Sorry to hear that. Please tell us how we can improve.