BIT-discourse-2021-43793
See a problem?- Import Source
- https://github.com/bitnami/vulndb/tree/main/data/discourse/BIT-discourse-2021-43793.json
- JSON Data
- https://api.osv.dev/v1/vulns/BIT-discourse-2021-43793
- Aliases
- Published
- 2024-03-06T11:08:51.899Z
- Modified
- 2025-05-20T10:02:07.006Z
- Summary
- Bypass of Poll voting limits in Discourse
- Details
-
Discourse is an open source discussion platform. In affected versions a vulnerability in the Polls feature allowed users to vote multiple times in a single-option poll. The problem is patched in the latest tests-passed, beta and stable versions of Discourse
- Database specific
{ "cpes": [ "cpe:2.3:a:discourse:discourse:*:*:*:*:*:*:*:*" ], "severity": "Medium" }- References
-
- https://github.com/discourse/discourse/commit/0c6b9df77bac9c6f7c7e2eadf6fe100064afdeab
- https://github.com/discourse/discourse/commit/1d0faedfbc3a8b77b971dc70d25e30791dbb6e0b
- https://github.com/discourse/discourse/security/advisories/GHSA-jq7h-44vc-h6qx
- https://nvd.nist.gov/vuln/detail/CVE-2021-43793
Affected packages
Bitnami / discourse
Package
- Name
- discourse
- Purl
- pkg:bitnami/discourse
Severity
- 4.3 (Medium) CVSS_V3 - CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:L/A:N CVSS Calculator