Discourse is an open source discussion platform. In affected versions a vulnerability in the Polls feature allowed users to vote multiple times in a single-option poll. The problem is patched in the latest tests-passed, beta and stable versions of Discourse
{
"unresolved_ranges": [
{
"cpes": [
"cpe:2.3:a:discourse:discourse:*:*:*:*:*:*:*:*"
],
"extracted_events": [
{
"fixed": "2.7.11"
}
],
"source": "CPE_RANGE",
"vendor_product": "discourse:discourse"
},
{
"cpes": [
"cpe:2.3:a:discourse:discourse:2.8.0:beta1:*:*:*:*:*:*",
"cpe:2.3:a:discourse:discourse:2.8.0:beta2:*:*:*:*:*:*",
"cpe:2.3:a:discourse:discourse:2.8.0:beta3:*:*:*:*:*:*",
"cpe:2.3:a:discourse:discourse:2.8.0:beta4:*:*:*:*:*:*",
"cpe:2.3:a:discourse:discourse:2.8.0:beta5:*:*:*:*:*:*",
"cpe:2.3:a:discourse:discourse:2.8.0:beta6:*:*:*:*:*:*",
"cpe:2.3:a:discourse:discourse:2.8.0:beta7:*:*:*:*:*:*"
],
"extracted_events": [
{
"introduced": "2.8.0-beta1"
},
{
"last_affected": "2.8.0-beta1"
},
{
"introduced": "2.8.0-beta2"
},
{
"last_affected": "2.8.0-beta2"
},
{
"introduced": "2.8.0-beta3"
},
{
"last_affected": "2.8.0-beta3"
},
{
"introduced": "2.8.0-beta4"
},
{
"last_affected": "2.8.0-beta4"
},
{
"introduced": "2.8.0-beta5"
},
{
"last_affected": "2.8.0-beta5"
},
{
"introduced": "2.8.0-beta6"
},
{
"last_affected": "2.8.0-beta6"
},
{
"introduced": "2.8.0-beta7"
},
{
"last_affected": "2.8.0-beta7"
}
],
"source": "CPE_STRING",
"vendor_product": "discourse:discourse"
}
]
}