BIT-discourse-2026-33251
See a problem?- Import Source
- https://github.com/bitnami/vulndb/tree/main/data/discourse/BIT-discourse-2026-33251.json
- JSON Data
- https://api.osv.dev/v1/vulns/BIT-discourse-2026-33251
- Aliases
-
- CVE-2026-33251
- GHSA-vm2x-9h8x-7jxm
- Published
- 2026-03-27T07:10:42.800Z
- Modified
- 2026-04-02T13:41:04.266312595Z
- Summary
- Discourse has a Hidden Solved topics permission bypass
- Details
-
Discourse is an open-source discussion platform. Prior to versions 2026.3.0, 2026.2.1, and 2026.1.2, an authorization bypass vulnerability in hidden Solved topics may allow unauthorized users to accept or unaccept solutions. Versions 2026.3.0, 2026.2.1, and 2026.1.2 contain a patch. As a workaround, ensure only trusted users are part of the Site Setting for acceptallsolutionsallowedgroups.
- Database specific
{ "cpes": [ "cpe:2.3:a:discourse:discourse:*:*:*:*:*:*:*:*" ], "severity": "Medium" }- References
Affected packages
Bitnami / discourse
Package
- Name
- discourse
- Purl
- pkg:bitnami/discourse
Severity
- 5.4 (Medium) CVSS_V3 - CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:N CVSS Calculator