Vulnerabilidad en Discourse (CVE-2022-41921)
Gravedad CVSS v3.1:
MEDIA
Tipo:
No Disponible / Otro tipo
Fecha de publicación:
28/11/2022
Última modificación:
01/12/2022
Descripción
*** Pendiente de traducción *** Discourse is an open-source discussion platform. Prior to version 2.9.0.beta13, users can post chat messages of an unlimited length, which can cause a denial of service for other users when posting huge amounts of text. Users should upgrade to version 2.9.0.beta13, where a limit has been introduced. No known workarounds are available.
Impacto
Puntuación base 3.x
4.30
Gravedad 3.x
MEDIA
Productos y versiones vulnerables
| CPE | Desde | Hasta |
|---|---|---|
| cpe:2.3:a:discourse:discourse:*:*:*:*:*:*:*:* | 2.9.0 (excluyendo) | |
| cpe:2.3:a:discourse:discourse:2.9.0:beta1:*:*:*:*:*:* | ||
| cpe:2.3:a:discourse:discourse:2.9.0:beta10:*:*:*:*:*:* | ||
| cpe:2.3:a:discourse:discourse:2.9.0:beta11:*:*:*:*:*:* | ||
| cpe:2.3:a:discourse:discourse:2.9.0:beta12:*:*:*:*:*:* | ||
| cpe:2.3:a:discourse:discourse:2.9.0:beta2:*:*:*:*:*:* | ||
| cpe:2.3:a:discourse:discourse:2.9.0:beta3:*:*:*:*:*:* | ||
| cpe:2.3:a:discourse:discourse:2.9.0:beta4:*:*:*:*:*:* | ||
| cpe:2.3:a:discourse:discourse:2.9.0:beta5:*:*:*:*:*:* | ||
| cpe:2.3:a:discourse:discourse:2.9.0:beta6:*:*:*:*:*:* | ||
| cpe:2.3:a:discourse:discourse:2.9.0:beta7:*:*:*:*:*:* | ||
| cpe:2.3:a:discourse:discourse:2.9.0:beta8:*:*:*:*:*:* | ||
| cpe:2.3:a:discourse:discourse:2.9.0:beta9:*:*:*:*:*:* |
Para consultar la lista completa de nombres de CPE con productos y versiones, ver esta página