CVE-2023-23624CWE-200

Discourse's exclude_tags param could leak which topics had a specific hidden tag

Medium · published January 27, 2023

CVSS v3.1
4.3
EPSS
1%
Percentile
47.5
In the wild
Unconfirmed
What it is

Discourse is an open-source discussion platform. Prior to version 3.0.1 on the `stable` branch and version 3.1.0.beta2 on the `beta` and `tests-passed` branches, someone can use the `exclude_tag param` to filter out topics and deduce which ones were using a specific hidden tag. This affects any Discourse site using hidden tags in public categories. This issue is patched in version 3.0.1 on the `stable` branch and version 3.1.0.beta2 on the `beta` and `tests-passed` branches. As a workaround, secure any categories that are using hidden tags, change any existing hidden tags to not include private data, or remove any hidden tags currently in use.

The record
Technical detail
CVSS v3.1
4.3 · MEDIUM
Vector
CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:N
CVSS v4.0
Not supplied
EPSS
0.00590 · 47.5th percentile
Weakness
CWE-200 · Exposure of Sensitive Information to an Unauthorized Actor
Published
2023-01-27T23:35Z
EPSS history
Timeline
  • 27 JAN 23:35Z
    Discourse's exclude_tags param could leak which topics had a specific hidden tag
    cvelistv5