CVE-2021-3138

In Discourse 2.7.0 through beta1, a rate-limit bypass leads to a bypass of the 2FA requirement for certain forms

published January 14, 2021

CVSS
—
EPSS
3%
Percentile
87.7
In the wild
Unconfirmed
What it is

In Discourse 2.7.0 through beta1, a rate-limit bypass leads to a bypass of the 2FA requirement for certain forms.

The record
Technical detail
CVSS
Not scored
CVSS v4.0
Not supplied
EPSS
0.03110 · 87.7th percentile
Published
2021-01-14T03:30Z
EPSS history
Timeline
  • 14 JAN 03:30Z
    In Discourse 2.7.0 through beta1, a rate-limit bypass leads to a bypass of the 2FA requirement for certain forms
    cvelistv5