CVE-2023-28107
First published: Fri Mar 17 2023(Updated: )
Discourse is an open-source discussion platform. Prior to version 3.0.2 of the `stable` branch and version 3.1.0.beta3 of the `beta` and `tests-passed` branches, a user logged as an administrator can request backups multiple times, which will eat up all the connections to the DB. If this is done on a site using multisite, then it can affect the whole cluster. The vulnerability is patched in version 3.0.2 of the `stable` branch and version 3.1.0.beta3 of the `beta` and `tests-passed` branches. There are no known workarounds.
Credit: security-advisories@github.com
| Affected Software | Affected Version | How to fix |
|---|---|---|
| Discourse Discourse | <=3.0.1 | |
| Discourse Discourse | <3.1.0 | |
| Discourse Discourse | =3.1.0-beta1 | |
| Discourse Discourse | =3.1.0-beta2 |
Never miss a vulnerability like this again
Sign up to SecAlerts for real-time vulnerability data matched to your software, aggregated from hundreds of sources.
Reference Links
- https://github.com/discourse/discourse/commit/0bd64788d2b4680c04fbef76314a24884d65fed9
- https://github.com/discourse/discourse/commit/78a3efa7104eed6dd3ed7a06a71e2705337d9e61
- https://github.com/discourse/discourse/pull/20700
- https://github.com/discourse/discourse/pull/20701
- https://github.com/discourse/discourse/security/advisories/GHSA-cp7c-fm4c-6xxx
Frequently Asked Questions
What is the vulnerability ID for this Discourse vulnerability?
The vulnerability ID for this Discourse vulnerability is CVE-2023-28107.
What is the severity of CVE-2023-28107?
The severity of CVE-2023-28107 is medium (4.9).
How does this vulnerability affect Discourse?
This vulnerability affects Discourse versions prior to 3.0.2 of the `stable` branch and version 3.1.0.beta3 of the `beta` and `tests-passed` branches.
How can an attacker exploit this vulnerability?
An attacker can exploit this vulnerability by requesting backups multiple times as an administrator, which will consume all the connections to the database.
Are there any available fixes for CVE-2023-28107?
Yes, Discourse has released fixes for CVE-2023-28107. It is recommended to update to version 3.0.2 of the `stable` branch or version 3.1.0.beta3 of the `beta` and `tests-passed` branches.
- collector/nvd-index
- vendor/discourse
- canonical/discourse discourse
- version/discourse discourse/3.0.1
- version/discourse discourse/3.1.0-beta1
- version/discourse discourse/3.1.0-beta2