First published: Thu Jan 05 2023(Updated: )
Discourse is an option source discussion platform. Prior to version 2.8.14 on the `stable` branch and version 3.0.0.beta16 on the `beta` and `tests-passed` branches, the number of times a user posted in an arbitrary topic is exposed to unauthorized users through the `/u/username.json` endpoint. The issue is patched in version 2.8.14 and 3.0.0.beta16. There is no known workaround.
Credit: security-advisories@github.com security-advisories@github.com
Affected Software | Affected Version | How to fix |
---|---|---|
Discourse Discourse | <2.8.14 | |
Discourse Discourse | =1.1.0-beta1 | |
Discourse Discourse | =1.1.0-beta2 | |
Discourse Discourse | =1.1.0-beta3 | |
Discourse Discourse | =1.1.0-beta4 | |
Discourse Discourse | =1.1.0-beta5 | |
Discourse Discourse | =1.1.0-beta6 | |
Discourse Discourse | =1.1.0-beta6b | |
Discourse Discourse | =1.1.0-beta7 | |
Discourse Discourse | =1.1.0-beta8 | |
Discourse Discourse | =1.2.0-beta1 | |
Discourse Discourse | =1.2.0-beta2 | |
Discourse Discourse | =1.2.0-beta3 | |
Discourse Discourse | =1.2.0-beta4 | |
Discourse Discourse | =1.2.0-beta5 | |
Discourse Discourse | =1.2.0-beta6 | |
Discourse Discourse | =1.2.0-beta7 | |
Discourse Discourse | =1.2.0-beta8 | |
Discourse Discourse | =1.2.0-beta9 | |
Discourse Discourse | =1.3.0-beta1 | |
Discourse Discourse | =1.3.0-beta10 | |
Discourse Discourse | =1.3.0-beta11 | |
Discourse Discourse | =1.3.0-beta2 | |
Discourse Discourse | =1.3.0-beta3 | |
Discourse Discourse | =1.3.0-beta4 | |
Discourse Discourse | =1.3.0-beta5 | |
Discourse Discourse | =1.3.0-beta6 | |
Discourse Discourse | =1.3.0-beta7 | |
Discourse Discourse | =1.3.0-beta8 | |
Discourse Discourse | =1.3.0-beta9 | |
Discourse Discourse | =1.4.0-beta1 | |
Discourse Discourse | =1.4.0-beta10 | |
Discourse Discourse | =1.4.0-beta11 | |
Discourse Discourse | =1.4.0-beta12 | |
Discourse Discourse | =1.4.0-beta2 | |
Discourse Discourse | =1.4.0-beta3 | |
Discourse Discourse | =1.4.0-beta4 | |
Discourse Discourse | =1.4.0-beta5 | |
Discourse Discourse | =1.4.0-beta6 | |
Discourse Discourse | =1.4.0-beta7 | |
Discourse Discourse | =1.4.0-beta8 | |
Discourse Discourse | =1.4.0-beta9 | |
Discourse Discourse | =1.5.0-beta1 | |
Discourse Discourse | =1.5.0-beta10 | |
Discourse Discourse | =1.5.0-beta11 | |
Discourse Discourse | =1.5.0-beta12 | |
Discourse Discourse | =1.5.0-beta13 | |
Discourse Discourse | =1.5.0-beta13b | |
Discourse Discourse | =1.5.0-beta14 | |
Discourse Discourse | =1.5.0-beta2 | |
Discourse Discourse | =1.5.0-beta3 | |
Discourse Discourse | =1.5.0-beta4 | |
Discourse Discourse | =1.5.0-beta5 | |
Discourse Discourse | =1.5.0-beta6 | |
Discourse Discourse | =1.5.0-beta7 | |
Discourse Discourse | =1.5.0-beta8 | |
Discourse Discourse | =1.5.0-beta9 | |
Discourse Discourse | =1.6.0-beta1 | |
Discourse Discourse | =1.6.0-beta10 | |
Discourse Discourse | =1.6.0-beta11 | |
Discourse Discourse | =1.6.0-beta12 | |
Discourse Discourse | =1.6.0-beta2 | |
Discourse Discourse | =1.6.0-beta3 | |
Discourse Discourse | =1.6.0-beta4 | |
Discourse Discourse | =1.6.0-beta5 | |
Discourse Discourse | =1.6.0-beta6 | |
Discourse Discourse | =1.6.0-beta7 | |
Discourse Discourse | =1.6.0-beta8 | |
Discourse Discourse | =1.6.0-beta9 | |
Discourse Discourse | =1.7.0-beta1 | |
Discourse Discourse | =1.7.0-beta10 | |
Discourse Discourse | =1.7.0-beta11 | |
Discourse Discourse | =1.7.0-beta2 | |
Discourse Discourse | =1.7.0-beta3 | |
Discourse Discourse | =1.7.0-beta4 | |
Discourse Discourse | =1.7.0-beta5 | |
Discourse Discourse | =1.7.0-beta6 | |
Discourse Discourse | =1.7.0-beta7 | |
Discourse Discourse | =1.7.0-beta8 | |
Discourse Discourse | =1.7.0-beta9 | |
Discourse Discourse | =1.8.0-beta1 | |
Discourse Discourse | =1.8.0-beta10 | |
Discourse Discourse | =1.8.0-beta11 | |
Discourse Discourse | =1.8.0-beta12 | |
Discourse Discourse | =1.8.0-beta13 | |
Discourse Discourse | =1.8.0-beta2 | |
Discourse Discourse | =1.8.0-beta3 | |
Discourse Discourse | =1.8.0-beta4 | |
Discourse Discourse | =1.8.0-beta5 | |
Discourse Discourse | =1.8.0-beta6 | |
Discourse Discourse | =1.8.0-beta7 | |
Discourse Discourse | =1.8.0-beta8 | |
Discourse Discourse | =1.8.0-beta9 | |
Discourse Discourse | =1.9.0-beta1 | |
Discourse Discourse | =1.9.0-beta10 | |
Discourse Discourse | =1.9.0-beta11 | |
Discourse Discourse | =1.9.0-beta12 | |
Discourse Discourse | =1.9.0-beta13 | |
Discourse Discourse | =1.9.0-beta14 | |
Discourse Discourse | =1.9.0-beta15 | |
Discourse Discourse | =1.9.0-beta16 | |
Discourse Discourse | =1.9.0-beta17 | |
Discourse Discourse | =1.9.0-beta2 | |
Discourse Discourse | =1.9.0-beta3 | |
Discourse Discourse | =1.9.0-beta4 | |
Discourse Discourse | =1.9.0-beta5 | |
Discourse Discourse | =1.9.0-beta6 | |
Discourse Discourse | =1.9.0-beta7 | |
Discourse Discourse | =1.9.0-beta8 | |
Discourse Discourse | =1.9.0-beta9 | |
Discourse Discourse | =2.0.0-beta1 | |
Discourse Discourse | =2.0.0-beta10 | |
Discourse Discourse | =2.0.0-beta2 | |
Discourse Discourse | =2.0.0-beta3 | |
Discourse Discourse | =2.0.0-beta4 | |
Discourse Discourse | =2.0.0-beta5 | |
Discourse Discourse | =2.0.0-beta6 | |
Discourse Discourse | =2.0.0-beta7 | |
Discourse Discourse | =2.0.0-beta8 | |
Discourse Discourse | =2.0.0-beta9 | |
Discourse Discourse | =2.1.0-beta1 | |
Discourse Discourse | =2.1.0-beta2 | |
Discourse Discourse | =2.1.0-beta3 | |
Discourse Discourse | =2.1.0-beta4 | |
Discourse Discourse | =2.1.0-beta5 | |
Discourse Discourse | =2.1.0-beta6 | |
Discourse Discourse | =2.2.0-beta1 | |
Discourse Discourse | =2.2.0-beta10 | |
Discourse Discourse | =2.2.0-beta2 | |
Discourse Discourse | =2.2.0-beta3 | |
Discourse Discourse | =2.2.0-beta4 | |
Discourse Discourse | =2.2.0-beta5 | |
Discourse Discourse | =2.2.0-beta6 | |
Discourse Discourse | =2.2.0-beta7 | |
Discourse Discourse | =2.2.0-beta8 | |
Discourse Discourse | =2.2.0-beta9 | |
Discourse Discourse | =2.3.0-beta1 | |
Discourse Discourse | =2.3.0-beta10 | |
Discourse Discourse | =2.3.0-beta11 | |
Discourse Discourse | =2.3.0-beta2 | |
Discourse Discourse | =2.3.0-beta3 | |
Discourse Discourse | =2.3.0-beta4 | |
Discourse Discourse | =2.3.0-beta5 | |
Discourse Discourse | =2.3.0-beta6 | |
Discourse Discourse | =2.3.0-beta7 | |
Discourse Discourse | =2.3.0-beta8 | |
Discourse Discourse | =2.3.0-beta9 | |
Discourse Discourse | =2.4.0-beta1 | |
Discourse Discourse | =2.4.0-beta10 | |
Discourse Discourse | =2.4.0-beta11 | |
Discourse Discourse | =2.4.0-beta2 | |
Discourse Discourse | =2.4.0-beta3 | |
Discourse Discourse | =2.4.0-beta4 | |
Discourse Discourse | =2.4.0-beta5 | |
Discourse Discourse | =2.4.0-beta6 | |
Discourse Discourse | =2.4.0-beta7 | |
Discourse Discourse | =2.4.0-beta8 | |
Discourse Discourse | =2.4.0-beta9 | |
Discourse Discourse | =2.5.0-beta1 | |
Discourse Discourse | =2.5.0-beta2 | |
Discourse Discourse | =2.5.0-beta3 | |
Discourse Discourse | =2.5.0-beta4 | |
Discourse Discourse | =2.5.0-beta5 | |
Discourse Discourse | =2.5.0-beta6 | |
Discourse Discourse | =2.5.0-beta7 | |
Discourse Discourse | =2.6.0-beta1 | |
Discourse Discourse | =2.6.0-beta2 | |
Discourse Discourse | =2.6.0-beta3 | |
Discourse Discourse | =2.6.0-beta4 | |
Discourse Discourse | =2.6.0-beta5 | |
Discourse Discourse | =2.6.0-beta6 | |
Discourse Discourse | =2.7.0-beta1 | |
Discourse Discourse | =2.7.0-beta2 | |
Discourse Discourse | =2.7.0-beta3 | |
Discourse Discourse | =2.7.0-beta4 | |
Discourse Discourse | =2.7.0-beta5 | |
Discourse Discourse | =2.7.0-beta6 | |
Discourse Discourse | =2.7.0-beta7 | |
Discourse Discourse | =2.7.0-beta8 | |
Discourse Discourse | =2.7.0-beta9 | |
Discourse Discourse | =2.8.0-beta1 | |
Discourse Discourse | =2.8.0-beta10 | |
Discourse Discourse | =2.8.0-beta11 | |
Discourse Discourse | =2.8.0-beta2 | |
Discourse Discourse | =2.8.0-beta3 | |
Discourse Discourse | =2.8.0-beta4 | |
Discourse Discourse | =2.8.0-beta5 | |
Discourse Discourse | =2.8.0-beta6 | |
Discourse Discourse | =2.8.0-beta7 | |
Discourse Discourse | =2.8.0-beta8 | |
Discourse Discourse | =2.8.0-beta9 | |
Discourse Discourse | =2.9.0-beta1 | |
Discourse Discourse | =2.9.0-beta10 | |
Discourse Discourse | =2.9.0-beta11 | |
Discourse Discourse | =2.9.0-beta12 | |
Discourse Discourse | =2.9.0-beta13 | |
Discourse Discourse | =2.9.0-beta14 | |
Discourse Discourse | =2.9.0-beta2 | |
Discourse Discourse | =2.9.0-beta3 | |
Discourse Discourse | =2.9.0-beta4 | |
Discourse Discourse | =2.9.0-beta5 | |
Discourse Discourse | =2.9.0-beta6 | |
Discourse Discourse | =2.9.0-beta7 | |
Discourse Discourse | =2.9.0-beta8 | |
Discourse Discourse | =2.9.0-beta9 | |
Discourse Discourse | =3.0.0-beta15 | |
<2.8.14 | ||
=1.1.0-beta1 | ||
=1.1.0-beta2 | ||
=1.1.0-beta3 | ||
=1.1.0-beta4 | ||
=1.1.0-beta5 | ||
=1.1.0-beta6 | ||
=1.1.0-beta6b | ||
=1.1.0-beta7 | ||
=1.1.0-beta8 | ||
=1.2.0-beta1 | ||
=1.2.0-beta2 | ||
=1.2.0-beta3 | ||
=1.2.0-beta4 | ||
=1.2.0-beta5 | ||
=1.2.0-beta6 | ||
=1.2.0-beta7 | ||
=1.2.0-beta8 | ||
=1.2.0-beta9 | ||
=1.3.0-beta1 | ||
=1.3.0-beta10 | ||
=1.3.0-beta11 | ||
=1.3.0-beta2 | ||
=1.3.0-beta3 | ||
=1.3.0-beta4 | ||
=1.3.0-beta5 | ||
=1.3.0-beta6 | ||
=1.3.0-beta7 | ||
=1.3.0-beta8 | ||
=1.3.0-beta9 | ||
=1.4.0-beta1 | ||
=1.4.0-beta10 | ||
=1.4.0-beta11 | ||
=1.4.0-beta12 | ||
=1.4.0-beta2 | ||
=1.4.0-beta3 | ||
=1.4.0-beta4 | ||
=1.4.0-beta5 | ||
=1.4.0-beta6 | ||
=1.4.0-beta7 | ||
=1.4.0-beta8 | ||
=1.4.0-beta9 | ||
=1.5.0-beta1 | ||
=1.5.0-beta10 | ||
=1.5.0-beta11 | ||
=1.5.0-beta12 | ||
=1.5.0-beta13 | ||
=1.5.0-beta13b | ||
=1.5.0-beta14 | ||
=1.5.0-beta2 | ||
=1.5.0-beta3 | ||
=1.5.0-beta4 | ||
=1.5.0-beta5 | ||
=1.5.0-beta6 | ||
=1.5.0-beta7 | ||
=1.5.0-beta8 | ||
=1.5.0-beta9 | ||
=1.6.0-beta1 | ||
=1.6.0-beta10 | ||
=1.6.0-beta11 | ||
=1.6.0-beta12 | ||
=1.6.0-beta2 | ||
=1.6.0-beta3 | ||
=1.6.0-beta4 | ||
=1.6.0-beta5 | ||
=1.6.0-beta6 | ||
=1.6.0-beta7 | ||
=1.6.0-beta8 | ||
=1.6.0-beta9 | ||
=1.7.0-beta1 | ||
=1.7.0-beta10 | ||
=1.7.0-beta11 | ||
=1.7.0-beta2 | ||
=1.7.0-beta3 | ||
=1.7.0-beta4 | ||
=1.7.0-beta5 | ||
=1.7.0-beta6 | ||
=1.7.0-beta7 | ||
=1.7.0-beta8 | ||
=1.7.0-beta9 | ||
=1.8.0-beta1 | ||
=1.8.0-beta10 | ||
=1.8.0-beta11 | ||
=1.8.0-beta12 | ||
=1.8.0-beta13 | ||
=1.8.0-beta2 | ||
=1.8.0-beta3 | ||
=1.8.0-beta4 | ||
=1.8.0-beta5 | ||
=1.8.0-beta6 | ||
=1.8.0-beta7 | ||
=1.8.0-beta8 | ||
=1.8.0-beta9 | ||
=1.9.0-beta1 | ||
=1.9.0-beta10 | ||
=1.9.0-beta11 | ||
=1.9.0-beta12 | ||
=1.9.0-beta13 | ||
=1.9.0-beta14 | ||
=1.9.0-beta15 | ||
=1.9.0-beta16 | ||
=1.9.0-beta17 | ||
=1.9.0-beta2 | ||
=1.9.0-beta3 | ||
=1.9.0-beta4 | ||
=1.9.0-beta5 | ||
=1.9.0-beta6 | ||
=1.9.0-beta7 | ||
=1.9.0-beta8 | ||
=1.9.0-beta9 | ||
=2.0.0-beta1 | ||
=2.0.0-beta10 | ||
=2.0.0-beta2 | ||
=2.0.0-beta3 | ||
=2.0.0-beta4 | ||
=2.0.0-beta5 | ||
=2.0.0-beta6 | ||
=2.0.0-beta7 | ||
=2.0.0-beta8 | ||
=2.0.0-beta9 | ||
=2.1.0-beta1 | ||
=2.1.0-beta2 | ||
=2.1.0-beta3 | ||
=2.1.0-beta4 | ||
=2.1.0-beta5 | ||
=2.1.0-beta6 | ||
=2.2.0-beta1 | ||
=2.2.0-beta10 | ||
=2.2.0-beta2 | ||
=2.2.0-beta3 | ||
=2.2.0-beta4 | ||
=2.2.0-beta5 | ||
=2.2.0-beta6 | ||
=2.2.0-beta7 | ||
=2.2.0-beta8 | ||
=2.2.0-beta9 | ||
=2.3.0-beta1 | ||
=2.3.0-beta10 | ||
=2.3.0-beta11 | ||
=2.3.0-beta2 | ||
=2.3.0-beta3 | ||
=2.3.0-beta4 | ||
=2.3.0-beta5 | ||
=2.3.0-beta6 | ||
=2.3.0-beta7 | ||
=2.3.0-beta8 | ||
=2.3.0-beta9 | ||
=2.4.0-beta1 | ||
=2.4.0-beta10 | ||
=2.4.0-beta11 | ||
=2.4.0-beta2 | ||
=2.4.0-beta3 | ||
=2.4.0-beta4 | ||
=2.4.0-beta5 | ||
=2.4.0-beta6 | ||
=2.4.0-beta7 | ||
=2.4.0-beta8 | ||
=2.4.0-beta9 | ||
=2.5.0-beta1 | ||
=2.5.0-beta2 | ||
=2.5.0-beta3 | ||
=2.5.0-beta4 | ||
=2.5.0-beta5 | ||
=2.5.0-beta6 | ||
=2.5.0-beta7 | ||
=2.6.0-beta1 | ||
=2.6.0-beta2 | ||
=2.6.0-beta3 | ||
=2.6.0-beta4 | ||
=2.6.0-beta5 | ||
=2.6.0-beta6 | ||
=2.7.0-beta1 | ||
=2.7.0-beta2 | ||
=2.7.0-beta3 | ||
=2.7.0-beta4 | ||
=2.7.0-beta5 | ||
=2.7.0-beta6 | ||
=2.7.0-beta7 | ||
=2.7.0-beta8 | ||
=2.7.0-beta9 | ||
=2.8.0-beta1 | ||
=2.8.0-beta10 | ||
=2.8.0-beta11 | ||
=2.8.0-beta2 | ||
=2.8.0-beta3 | ||
=2.8.0-beta4 | ||
=2.8.0-beta5 | ||
=2.8.0-beta6 | ||
=2.8.0-beta7 | ||
=2.8.0-beta8 | ||
=2.8.0-beta9 | ||
=2.9.0-beta1 | ||
=2.9.0-beta10 | ||
=2.9.0-beta11 | ||
=2.9.0-beta12 | ||
=2.9.0-beta13 | ||
=2.9.0-beta14 | ||
=2.9.0-beta2 | ||
=2.9.0-beta3 | ||
=2.9.0-beta4 | ||
=2.9.0-beta5 | ||
=2.9.0-beta6 | ||
=2.9.0-beta7 | ||
=2.9.0-beta8 | ||
=2.9.0-beta9 | ||
=3.0.0-beta15 |
Sign up to SecAlerts for real-time vulnerability data matched to your software, aggregated from hundreds of sources.