BIT-discourse-2023-38498

See a problem?
Import Source
https://github.com/bitnami/vulndb/tree/main/data/discourse/BIT-discourse-2023-38498.json
JSON Data
https://api.osv.dev/v1/vulns/BIT-discourse-2023-38498
Aliases
Published
2024-03-06T10:55:24.002Z
Modified
2024-03-06T11:25:28.861Z
Summary
[none]
Details

Discourse is an open source discussion platform. Prior to version 3.0.6 of the stable branch and version 3.1.0.beta7 of the beta and tests-passed branches, a malicious user can prevent the defer queue from proceeding promptly on sites hosted in the same multisite installation. The issue is patched in version 3.0.6 of the stable branch and version 3.1.0.beta7 of the beta and tests-passed branches. There are no known workarounds for this vulnerability. Users of multisite configurations should upgrade.

References

Affected packages

Bitnami / discourse

Package

Name
discourse
Purl
pkg:bitnami/discourse

Severity

  • 6.5 (Medium) CVSS_V3 - CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H CVSS Calculator

Affected ranges

Type
SEMVER
Events
Introduced
0Unknown introduced version / All previous versions are affected
Fixed
3.0.6
Type
SEMVER
Events
Introduced
1.1.0-beta1
Last affected
1.1.0-beta1
Introduced
1.1.0-beta2
Last affected
1.1.0-beta2
Introduced
1.1.0-beta3
Last affected
1.1.0-beta3
Introduced
1.1.0-beta4
Last affected
1.1.0-beta4
Introduced
1.1.0-beta5
Last affected
1.1.0-beta5
Introduced
1.1.0-beta6
Last affected
1.1.0-beta6
Introduced
1.1.0-beta6b
Last affected
1.1.0-beta6b
Introduced
1.1.0-beta7
Last affected
1.1.0-beta7
Introduced
1.1.0-beta8
Last affected
1.1.0-beta8
Introduced
1.2.0-beta1
Last affected
1.2.0-beta1
Introduced
1.2.0-beta2
Last affected
1.2.0-beta2
Introduced
1.2.0-beta3
Last affected
1.2.0-beta3
Introduced
1.2.0-beta4
Last affected
1.2.0-beta4
Introduced
1.2.0-beta5
Last affected
1.2.0-beta5
Introduced
1.2.0-beta6
Last affected
1.2.0-beta6
Introduced
1.2.0-beta7
Last affected
1.2.0-beta7
Introduced
1.2.0-beta8
Last affected
1.2.0-beta8
Introduced
1.2.0-beta9
Last affected
1.2.0-beta9
Introduced
1.3.0-beta1
Last affected
1.3.0-beta1
Introduced
1.3.0-beta10
Last affected
1.3.0-beta10
Introduced
1.3.0-beta11
Last affected
1.3.0-beta11
Introduced
1.3.0-beta2
Last affected
1.3.0-beta2
Introduced
1.3.0-beta3
Last affected
1.3.0-beta3
Introduced
1.3.0-beta4
Last affected
1.3.0-beta4
Introduced
1.3.0-beta5
Last affected
1.3.0-beta5
Introduced
1.3.0-beta6
Last affected
1.3.0-beta6
Introduced
1.3.0-beta7
Last affected
1.3.0-beta7
Introduced
1.3.0-beta8
Last affected
1.3.0-beta8
Introduced
1.3.0-beta9
Last affected
1.3.0-beta9
Introduced
1.4.0-beta1
Last affected
1.4.0-beta1
Introduced
1.4.0-beta10
Last affected
1.4.0-beta10
Introduced
1.4.0-beta11
Last affected
1.4.0-beta11
Introduced
1.4.0-beta12
Last affected
1.4.0-beta12
Introduced
1.4.0-beta2
Last affected
1.4.0-beta2
Introduced
1.4.0-beta3
Last affected
1.4.0-beta3
Introduced
1.4.0-beta4
Last affected
1.4.0-beta4
Introduced
1.4.0-beta5
Last affected
1.4.0-beta5
Introduced
1.4.0-beta6
Last affected
1.4.0-beta6
Introduced
1.4.0-beta7
Last affected
1.4.0-beta7
Introduced
1.4.0-beta8
Last affected
1.4.0-beta8
Introduced
1.4.0-beta9
Last affected
1.4.0-beta9
Introduced
1.5.0-beta1
Last affected
1.5.0-beta1
Introduced
1.5.0-beta10
Last affected
1.5.0-beta10
Introduced
1.5.0-beta11
Last affected
1.5.0-beta11
Introduced
1.5.0-beta12
Last affected
1.5.0-beta12
Introduced
1.5.0-beta13
Last affected
1.5.0-beta13
Introduced
1.5.0-beta13b
Last affected
1.5.0-beta13b
Introduced
1.5.0-beta14
Last affected
1.5.0-beta14
Introduced
1.5.0-beta2
Last affected
1.5.0-beta2
Introduced
1.5.0-beta3
Last affected
1.5.0-beta3
Introduced
1.5.0-beta4
Last affected
1.5.0-beta4
Introduced
1.5.0-beta5
Last affected
1.5.0-beta5
Introduced
1.5.0-beta6
Last affected
1.5.0-beta6
Introduced
1.5.0-beta7
Last affected
1.5.0-beta7
Introduced
1.5.0-beta8
Last affected
1.5.0-beta8
Introduced
1.5.0-beta9
Last affected
1.5.0-beta9
Introduced
1.6.0-beta1
Last affected
1.6.0-beta1
Introduced
1.6.0-beta10
Last affected
1.6.0-beta10
Introduced
1.6.0-beta11
Last affected
1.6.0-beta11
Introduced
1.6.0-beta12
Last affected
1.6.0-beta12
Introduced
1.6.0-beta2
Last affected
1.6.0-beta2
Introduced
1.6.0-beta3
Last affected
1.6.0-beta3
Introduced
1.6.0-beta4
Last affected
1.6.0-beta4
Introduced
1.6.0-beta5
Last affected
1.6.0-beta5
Introduced
1.6.0-beta6
Last affected
1.6.0-beta6
Introduced
1.6.0-beta7
Last affected
1.6.0-beta7
Introduced
1.6.0-beta8
Last affected
1.6.0-beta8
Introduced
1.6.0-beta9
Last affected
1.6.0-beta9
Introduced
1.7.0-beta1
Last affected
1.7.0-beta1
Introduced
1.7.0-beta10
Last affected
1.7.0-beta10
Introduced
1.7.0-beta11
Last affected
1.7.0-beta11
Introduced
1.7.0-beta2
Last affected
1.7.0-beta2
Introduced
1.7.0-beta3
Last affected
1.7.0-beta3
Introduced
1.7.0-beta4
Last affected
1.7.0-beta4
Introduced
1.7.0-beta5
Last affected
1.7.0-beta5
Introduced
1.7.0-beta6
Last affected
1.7.0-beta6
Introduced
1.7.0-beta7
Last affected
1.7.0-beta7
Introduced
1.7.0-beta8
Last affected
1.7.0-beta8
Introduced
1.7.0-beta9
Last affected
1.7.0-beta9
Introduced
1.8.0-beta1
Last affected
1.8.0-beta1
Introduced
1.8.0-beta10
Last affected
1.8.0-beta10
Introduced
1.8.0-beta11
Last affected
1.8.0-beta11
Introduced
1.8.0-beta12
Last affected
1.8.0-beta12
Introduced
1.8.0-beta13
Last affected
1.8.0-beta13
Introduced
1.8.0-beta2
Last affected
1.8.0-beta2
Introduced
1.8.0-beta3
Last affected
1.8.0-beta3
Introduced
1.8.0-beta4
Last affected
1.8.0-beta4
Introduced
1.8.0-beta5
Last affected
1.8.0-beta5
Introduced
1.8.0-beta6
Last affected
1.8.0-beta6
Introduced
1.8.0-beta7
Last affected
1.8.0-beta7
Introduced
1.8.0-beta8
Last affected
1.8.0-beta8
Introduced
1.8.0-beta9
Last affected
1.8.0-beta9
Introduced
1.9.0-beta1
Last affected
1.9.0-beta1
Introduced
1.9.0-beta10
Last affected
1.9.0-beta10
Introduced
1.9.0-beta11
Last affected
1.9.0-beta11
Introduced
1.9.0-beta12
Last affected
1.9.0-beta12
Introduced
1.9.0-beta13
Last affected
1.9.0-beta13
Introduced
1.9.0-beta14
Last affected
1.9.0-beta14
Introduced
1.9.0-beta15
Last affected
1.9.0-beta15
Introduced
1.9.0-beta16
Last affected
1.9.0-beta16
Introduced
1.9.0-beta17
Last affected
1.9.0-beta17
Introduced
1.9.0-beta2
Last affected
1.9.0-beta2
Introduced
1.9.0-beta3
Last affected
1.9.0-beta3
Introduced
1.9.0-beta4
Last affected
1.9.0-beta4
Introduced
1.9.0-beta5
Last affected
1.9.0-beta5
Introduced
1.9.0-beta6
Last affected
1.9.0-beta6
Introduced
1.9.0-beta7
Last affected
1.9.0-beta7
Introduced
1.9.0-beta8
Last affected
1.9.0-beta8
Introduced
1.9.0-beta9
Last affected
1.9.0-beta9
Introduced
2.0.0-beta1
Last affected
2.0.0-beta1
Introduced
2.0.0-beta10
Last affected
2.0.0-beta10
Introduced
2.0.0-beta2
Last affected
2.0.0-beta2
Introduced
2.0.0-beta3
Last affected
2.0.0-beta3
Introduced
2.0.0-beta4
Last affected
2.0.0-beta4
Introduced
2.0.0-beta5
Last affected
2.0.0-beta5
Introduced
2.0.0-beta6
Last affected
2.0.0-beta6
Introduced
2.0.0-beta7
Last affected
2.0.0-beta7
Introduced
2.0.0-beta8
Last affected
2.0.0-beta8
Introduced
2.0.0-beta9
Last affected
2.0.0-beta9
Introduced
2.1.0-beta1
Last affected
2.1.0-beta1
Introduced
2.1.0-beta2
Last affected
2.1.0-beta2
Introduced
2.1.0-beta3
Last affected
2.1.0-beta3
Introduced
2.1.0-beta4
Last affected
2.1.0-beta4
Introduced
2.1.0-beta5
Last affected
2.1.0-beta5
Introduced
2.1.0-beta6
Last affected
2.1.0-beta6
Introduced
2.2.0-beta1
Last affected
2.2.0-beta1
Introduced
2.2.0-beta10
Last affected
2.2.0-beta10
Introduced
2.2.0-beta2
Last affected
2.2.0-beta2
Introduced
2.2.0-beta3
Last affected
2.2.0-beta3
Introduced
2.2.0-beta4
Last affected
2.2.0-beta4
Introduced
2.2.0-beta5
Last affected
2.2.0-beta5
Introduced
2.2.0-beta6
Last affected
2.2.0-beta6
Introduced
2.2.0-beta7
Last affected
2.2.0-beta7
Introduced
2.2.0-beta8
Last affected
2.2.0-beta8
Introduced
2.2.0-beta9
Last affected
2.2.0-beta9
Introduced
2.3.0-beta1
Last affected
2.3.0-beta1
Introduced
2.3.0-beta10
Last affected
2.3.0-beta10
Introduced
2.3.0-beta11
Last affected
2.3.0-beta11
Introduced
2.3.0-beta2
Last affected
2.3.0-beta2
Introduced
2.3.0-beta3
Last affected
2.3.0-beta3
Introduced
2.3.0-beta4
Last affected
2.3.0-beta4
Introduced
2.3.0-beta5
Last affected
2.3.0-beta5
Introduced
2.3.0-beta6
Last affected
2.3.0-beta6
Introduced
2.3.0-beta7
Last affected
2.3.0-beta7
Introduced
2.3.0-beta8
Last affected
2.3.0-beta8
Introduced
2.3.0-beta9
Last affected
2.3.0-beta9
Introduced
2.4.0-beta1
Last affected
2.4.0-beta1
Introduced
2.4.0-beta10
Last affected
2.4.0-beta10
Introduced
2.4.0-beta11
Last affected
2.4.0-beta11
Introduced
2.4.0-beta2
Last affected
2.4.0-beta2
Introduced
2.4.0-beta3
Last affected
2.4.0-beta3
Introduced
2.4.0-beta4
Last affected
2.4.0-beta4
Introduced
2.4.0-beta5
Last affected
2.4.0-beta5
Introduced
2.4.0-beta6
Last affected
2.4.0-beta6
Introduced
2.4.0-beta7
Last affected
2.4.0-beta7
Introduced
2.4.0-beta8
Last affected
2.4.0-beta8
Introduced
2.4.0-beta9
Last affected
2.4.0-beta9
Introduced
2.5.0-beta1
Last affected
2.5.0-beta1
Introduced
2.5.0-beta2
Last affected
2.5.0-beta2
Introduced
2.5.0-beta3
Last affected
2.5.0-beta3
Introduced
2.5.0-beta4
Last affected
2.5.0-beta4
Introduced
2.5.0-beta5
Last affected
2.5.0-beta5
Introduced
2.5.0-beta6
Last affected
2.5.0-beta6
Introduced
2.5.0-beta7
Last affected
2.5.0-beta7
Introduced
2.6.0-beta1
Last affected
2.6.0-beta1
Introduced
2.6.0-beta2
Last affected
2.6.0-beta2
Introduced
2.6.0-beta3
Last affected
2.6.0-beta3
Introduced
2.6.0-beta4
Last affected
2.6.0-beta4
Introduced
2.6.0-beta5
Last affected
2.6.0-beta5
Introduced
2.6.0-beta6
Last affected
2.6.0-beta6
Introduced
2.7.0-beta1
Last affected
2.7.0-beta1
Introduced
2.7.0-beta2
Last affected
2.7.0-beta2
Introduced
2.7.0-beta3
Last affected
2.7.0-beta3
Introduced
2.7.0-beta4
Last affected
2.7.0-beta4
Introduced
2.7.0-beta5
Last affected
2.7.0-beta5
Introduced
2.7.0-beta6
Last affected
2.7.0-beta6
Introduced
2.7.0-beta7
Last affected
2.7.0-beta7
Introduced
2.7.0-beta8
Last affected
2.7.0-beta8
Introduced
2.7.0-beta9
Last affected
2.7.0-beta9
Introduced
2.8.0-beta1
Last affected
2.8.0-beta1
Introduced
2.8.0-beta10
Last affected
2.8.0-beta10
Introduced
2.8.0-beta11
Last affected
2.8.0-beta11
Introduced
2.8.0-beta2
Last affected
2.8.0-beta2
Introduced
2.8.0-beta3
Last affected
2.8.0-beta3
Introduced
2.8.0-beta4
Last affected
2.8.0-beta4
Introduced
2.8.0-beta5
Last affected
2.8.0-beta5
Introduced
2.8.0-beta6
Last affected
2.8.0-beta6
Introduced
2.8.0-beta7
Last affected
2.8.0-beta7
Introduced
2.8.0-beta8
Last affected
2.8.0-beta8
Introduced
2.8.0-beta9
Last affected
2.8.0-beta9
Introduced
2.9.0-beta1
Last affected
2.9.0-beta1
Introduced
2.9.0-beta10
Last affected
2.9.0-beta10
Introduced
2.9.0-beta11
Last affected
2.9.0-beta11
Introduced
2.9.0-beta12
Last affected
2.9.0-beta12
Introduced
2.9.0-beta13
Last affected
2.9.0-beta13
Introduced
2.9.0-beta14
Last affected
2.9.0-beta14
Introduced
2.9.0-beta2
Last affected
2.9.0-beta2
Introduced
2.9.0-beta3
Last affected
2.9.0-beta3
Introduced
2.9.0-beta4
Last affected
2.9.0-beta4
Introduced
2.9.0-beta5
Last affected
2.9.0-beta5
Introduced
2.9.0-beta6
Last affected
2.9.0-beta6
Introduced
2.9.0-beta7
Last affected
2.9.0-beta7
Introduced
2.9.0-beta8
Last affected
2.9.0-beta8
Introduced
2.9.0-beta9
Last affected
2.9.0-beta9
Introduced
3.0.0-beta15
Last affected
3.0.0-beta15
Introduced
3.0.0-beta16
Last affected
3.0.0-beta16
Introduced
3.1.0-beta1
Last affected
3.1.0-beta1
Introduced
3.1.0-beta2
Last affected
3.1.0-beta2
Introduced
3.1.0-beta3
Last affected
3.1.0-beta3
Introduced
3.1.0-beta5
Last affected
3.1.0-beta5
Introduced
3.1.0-beta6
Last affected
3.1.0-beta6