CVE-2023-25819CWE-359

Discourse tags with no visibility are leaking into og:article:tag

Medium · published March 4, 2023

CVSS v3.1
5.3
EPSS
0%
Percentile
41.6
In the wild
Unconfirmed
What it is

Discourse is an open source platform for community discussion. Tags that are normally private are showing in metadata. This affects any site running the `tests-passed` or `beta` branches >= 3.1.0.beta2. The issue is patched in the latest `beta` and `tests-passed` version of Discourse.

The record
Technical detail
CVSS v3.1
5.3 · MEDIUM
Vector
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N
CVSS v4.0
Not supplied
EPSS
0.00495 · 41.6th percentile
Weakness
CWE-359 · Exposure of Private Personal Information to an Unauthorized Actor
Published
2023-03-04T00:11Z
EPSS history
Timeline
  • 04 MAR 00:11Z
    Discourse tags with no visibility are leaking into og:article:tag
    cvelistv5