← Back

CVE-2023-41043

nvd nist
Published: Sep 15, 2023Modified: Nov 21, 2024

JSON object

Loading...
6.5
Vector
CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H
Exploitability: 2.8 / Impact: 3.6
Source: NVD

Description

Discourse is an open-source discussion platform. Prior to version 3.1.1 of the `stable` branch and version 3.2.0.beta1 of the `beta` and `tests-passed` branches, a malicious admin could create extremely large icons sprites, which would then be cached in each server process. This may cause server processes to be killed and lead to downtime. The issue is patched in version 3.1.1 of the `stable` branch and version 3.2.0.beta1 of the `beta` and `tests-passed` branches. This is only a concern for multisite installations. No action is required when the admins are trusted.

Affected (214)

Products: Discourse: Discourse
1 product
Discourse
Configuration A
1 vulnerable
Vulnerable SoftwareAffected Versions
Before 3.1.1
Configuration B
213 vulnerable
Vulnerable SoftwareAffected Versions
Discourse
Version 1.1.0 beta1
Version 1.1.0 beta2
Version 1.1.0 beta3
Version 1.1.0 beta4
Version 1.1.0 beta5
Version 1.1.0 beta6
Version 1.1.0 beta6b
Version 1.1.0 beta7
Version 1.1.0 beta8
Version 1.2.0 beta1
Version 1.2.0 beta2
Version 1.2.0 beta3
Version 1.2.0 beta4
Version 1.2.0 beta5
Version 1.2.0 beta6
Version 1.2.0 beta7
Version 1.2.0 beta8
Version 1.2.0 beta9
Version 1.3.0 beta10
Version 1.3.0 beta11
Version 1.3.0 beta1
Version 1.3.0 beta2
Version 1.3.0 beta3
Version 1.3.0 beta4
Version 1.3.0 beta5
Version 1.3.0 beta6
Version 1.3.0 beta7
Version 1.3.0 beta8
Version 1.3.0 beta9
Version 1.4.0 beta10
Version 1.4.0 beta11
Version 1.4.0 beta12
Version 1.4.0 beta1
Version 1.4.0 beta2
Version 1.4.0 beta3
Version 1.4.0 beta4
Version 1.4.0 beta5
Version 1.4.0 beta6
Version 1.4.0 beta7
Version 1.4.0 beta8
Version 1.4.0 beta9
Version 1.5.0 beta10
Version 1.5.0 beta11
Version 1.5.0 beta12
Version 1.5.0 beta13
Version 1.5.0 beta13b
Version 1.5.0 beta14
Version 1.5.0 beta1
Version 1.5.0 beta2
Version 1.5.0 beta3
Version 1.5.0 beta4
Version 1.5.0 beta5
Version 1.5.0 beta6
Version 1.5.0 beta7
Version 1.5.0 beta8
Version 1.5.0 beta9
Version 1.6.0 beta10
Version 1.6.0 beta11
Version 1.6.0 beta12
Version 1.6.0 beta1
Version 1.6.0 beta2
Version 1.6.0 beta3
Version 1.6.0 beta4
Version 1.6.0 beta5
Version 1.6.0 beta6
Version 1.6.0 beta7
Version 1.6.0 beta8
Version 1.6.0 beta9
Version 1.7.0 beta10
Version 1.7.0 beta11
Version 1.7.0 beta1
Version 1.7.0 beta2
Version 1.7.0 beta3
Version 1.7.0 beta4
Version 1.7.0 beta5
Version 1.7.0 beta6
Version 1.7.0 beta7
Version 1.7.0 beta8
Version 1.7.0 beta9
Version 1.8.0 beta10
Version 1.8.0 beta11
Version 1.8.0 beta12
Version 1.8.0 beta13
Version 1.8.0 beta1
Version 1.8.0 beta2
Version 1.8.0 beta3
Version 1.8.0 beta4
Version 1.8.0 beta5
Version 1.8.0 beta6
Version 1.8.0 beta7
Version 1.8.0 beta8
Version 1.8.0 beta9
Version 1.9.0 beta10
Version 1.9.0 beta11
Version 1.9.0 beta12
Version 1.9.0 beta13
Version 1.9.0 beta14
Version 1.9.0 beta15
Version 1.9.0 beta16
Version 1.9.0 beta17
Version 1.9.0 beta1
Version 1.9.0 beta2
Version 1.9.0 beta3
Version 1.9.0 beta4
Version 1.9.0 beta5
Version 1.9.0 beta6
Version 1.9.0 beta7
Version 1.9.0 beta8
Version 1.9.0 beta9
Version 2.0.0 beta10
Version 2.0.0 beta1
Version 2.0.0 beta2
Version 2.0.0 beta3
Version 2.0.0 beta4
Version 2.0.0 beta5
Version 2.0.0 beta6
Version 2.0.0 beta7
Version 2.0.0 beta8
Version 2.0.0 beta9
Version 2.1.0 beta1
Version 2.1.0 beta2
Version 2.1.0 beta3
Version 2.1.0 beta4
Version 2.1.0 beta5
Version 2.1.0 beta6
Version 2.2.0 beta10
Version 2.2.0 beta1
Version 2.2.0 beta2
Version 2.2.0 beta3
Version 2.2.0 beta4
Version 2.2.0 beta5
Version 2.2.0 beta6
Version 2.2.0 beta7
Version 2.2.0 beta8
Version 2.2.0 beta9
Version 2.3.0 beta10
Version 2.3.0 beta11
Version 2.3.0 beta1
Version 2.3.0 beta2
Version 2.3.0 beta3
Version 2.3.0 beta4
Version 2.3.0 beta5
Version 2.3.0 beta6
Version 2.3.0 beta7
Version 2.3.0 beta8
Version 2.3.0 beta9
Version 2.4.0 beta10
Version 2.4.0 beta11
Version 2.4.0 beta1
Version 2.4.0 beta2
Version 2.4.0 beta3
Version 2.4.0 beta4
Version 2.4.0 beta5
Version 2.4.0 beta6
Version 2.4.0 beta7
Version 2.4.0 beta8
Version 2.4.0 beta9
Version 2.5.0 beta1
Version 2.5.0 beta2
Version 2.5.0 beta3
Version 2.5.0 beta4
Version 2.5.0 beta5
Version 2.5.0 beta6
Version 2.5.0 beta7
Version 2.6.0 beta1
Version 2.6.0 beta2
Version 2.6.0 beta3
Version 2.6.0 beta4
Version 2.6.0 beta5
Version 2.6.0 beta6
Version 2.7.0 beta1
Version 2.7.0 beta2
Version 2.7.0 beta3
Version 2.7.0 beta4
Version 2.7.0 beta5
Version 2.7.0 beta6
Version 2.7.0 beta7
Version 2.7.0 beta8
Version 2.7.0 beta9
Version 2.8.0 beta10
Version 2.8.0 beta11
Version 2.8.0 beta1
Version 2.8.0 beta2
Version 2.8.0 beta3
Version 2.8.0 beta4
Version 2.8.0 beta5
Version 2.8.0 beta6
Version 2.8.0 beta7
Version 2.8.0 beta8
Version 2.8.0 beta9
Version 2.9.0 beta10
Version 2.9.0 beta11
Version 2.9.0 beta12
Version 2.9.0 beta13
Version 2.9.0 beta14
Version 2.9.0 beta1
Version 2.9.0 beta2
Version 2.9.0 beta3
Version 2.9.0 beta4
Version 2.9.0 beta5
Version 2.9.0 beta6
Version 2.9.0 beta7
Version 2.9.0 beta8
Version 2.9.0 beta9
Version 3.0.0 beta15
Version 3.0.0 beta16
Version 3.1.0 beta1
Version 3.1.0 beta2
Version 3.1.0 beta3
Version 3.1.0 beta5
Version 3.1.0 beta6
Version 3.1.0 beta7
Version 3.1.0 beta8

References (2)

Source: security-advisories@github.com
Third Party Advisory
Source: af854a3a-2127-422b-91ae-364da2661108
Third Party Advisory

Timeline

No history available yet.