First published: Fri Jul 28 2023(Updated: )
Discourse is an open source discussion platform. Prior to version 3.0.6 of the `stable` branch and version 3.1.0.beta7 of the `beta` and `tests-passed` branches, more users than permitted could be created from invite links. The issue is patched in version 3.0.6 of the `stable` branch and version 3.1.0.beta7 of the `beta` and `tests-passed` branches. As a workaround, use restrict to email address invites.
Credit: security-advisories@github.com security-advisories@github.com
Affected Software | Affected Version | How to fix |
---|---|---|
Discourse Discourse | <3.0.6 | |
Discourse Discourse | =1.1.0-beta1 | |
Discourse Discourse | =1.1.0-beta2 | |
Discourse Discourse | =1.1.0-beta3 | |
Discourse Discourse | =1.1.0-beta4 | |
Discourse Discourse | =1.1.0-beta5 | |
Discourse Discourse | =1.1.0-beta6 | |
Discourse Discourse | =1.1.0-beta6b | |
Discourse Discourse | =1.1.0-beta7 | |
Discourse Discourse | =1.1.0-beta8 | |
Discourse Discourse | =1.2.0-beta1 | |
Discourse Discourse | =1.2.0-beta2 | |
Discourse Discourse | =1.2.0-beta3 | |
Discourse Discourse | =1.2.0-beta4 | |
Discourse Discourse | =1.2.0-beta5 | |
Discourse Discourse | =1.2.0-beta6 | |
Discourse Discourse | =1.2.0-beta7 | |
Discourse Discourse | =1.2.0-beta8 | |
Discourse Discourse | =1.2.0-beta9 | |
Discourse Discourse | =1.3.0-beta1 | |
Discourse Discourse | =1.3.0-beta10 | |
Discourse Discourse | =1.3.0-beta11 | |
Discourse Discourse | =1.3.0-beta2 | |
Discourse Discourse | =1.3.0-beta3 | |
Discourse Discourse | =1.3.0-beta4 | |
Discourse Discourse | =1.3.0-beta5 | |
Discourse Discourse | =1.3.0-beta6 | |
Discourse Discourse | =1.3.0-beta7 | |
Discourse Discourse | =1.3.0-beta8 | |
Discourse Discourse | =1.3.0-beta9 | |
Discourse Discourse | =1.4.0-beta1 | |
Discourse Discourse | =1.4.0-beta10 | |
Discourse Discourse | =1.4.0-beta11 | |
Discourse Discourse | =1.4.0-beta12 | |
Discourse Discourse | =1.4.0-beta2 | |
Discourse Discourse | =1.4.0-beta3 | |
Discourse Discourse | =1.4.0-beta4 | |
Discourse Discourse | =1.4.0-beta5 | |
Discourse Discourse | =1.4.0-beta6 | |
Discourse Discourse | =1.4.0-beta7 | |
Discourse Discourse | =1.4.0-beta8 | |
Discourse Discourse | =1.4.0-beta9 | |
Discourse Discourse | =1.5.0-beta1 | |
Discourse Discourse | =1.5.0-beta10 | |
Discourse Discourse | =1.5.0-beta11 | |
Discourse Discourse | =1.5.0-beta12 | |
Discourse Discourse | =1.5.0-beta13 | |
Discourse Discourse | =1.5.0-beta13b | |
Discourse Discourse | =1.5.0-beta14 | |
Discourse Discourse | =1.5.0-beta2 | |
Discourse Discourse | =1.5.0-beta3 | |
Discourse Discourse | =1.5.0-beta4 | |
Discourse Discourse | =1.5.0-beta5 | |
Discourse Discourse | =1.5.0-beta6 | |
Discourse Discourse | =1.5.0-beta7 | |
Discourse Discourse | =1.5.0-beta8 | |
Discourse Discourse | =1.5.0-beta9 | |
Discourse Discourse | =1.6.0-beta1 | |
Discourse Discourse | =1.6.0-beta10 | |
Discourse Discourse | =1.6.0-beta11 | |
Discourse Discourse | =1.6.0-beta12 | |
Discourse Discourse | =1.6.0-beta2 | |
Discourse Discourse | =1.6.0-beta3 | |
Discourse Discourse | =1.6.0-beta4 | |
Discourse Discourse | =1.6.0-beta5 | |
Discourse Discourse | =1.6.0-beta6 | |
Discourse Discourse | =1.6.0-beta7 | |
Discourse Discourse | =1.6.0-beta8 | |
Discourse Discourse | =1.6.0-beta9 | |
Discourse Discourse | =1.7.0-beta1 | |
Discourse Discourse | =1.7.0-beta10 | |
Discourse Discourse | =1.7.0-beta11 | |
Discourse Discourse | =1.7.0-beta2 | |
Discourse Discourse | =1.7.0-beta3 | |
Discourse Discourse | =1.7.0-beta4 | |
Discourse Discourse | =1.7.0-beta5 | |
Discourse Discourse | =1.7.0-beta6 | |
Discourse Discourse | =1.7.0-beta7 | |
Discourse Discourse | =1.7.0-beta8 | |
Discourse Discourse | =1.7.0-beta9 | |
Discourse Discourse | =1.8.0-beta1 | |
Discourse Discourse | =1.8.0-beta10 | |
Discourse Discourse | =1.8.0-beta11 | |
Discourse Discourse | =1.8.0-beta12 | |
Discourse Discourse | =1.8.0-beta13 | |
Discourse Discourse | =1.8.0-beta2 | |
Discourse Discourse | =1.8.0-beta3 | |
Discourse Discourse | =1.8.0-beta4 | |
Discourse Discourse | =1.8.0-beta5 | |
Discourse Discourse | =1.8.0-beta6 | |
Discourse Discourse | =1.8.0-beta7 | |
Discourse Discourse | =1.8.0-beta8 | |
Discourse Discourse | =1.8.0-beta9 | |
Discourse Discourse | =1.9.0-beta1 | |
Discourse Discourse | =1.9.0-beta10 | |
Discourse Discourse | =1.9.0-beta11 | |
Discourse Discourse | =1.9.0-beta12 | |
Discourse Discourse | =1.9.0-beta13 | |
Discourse Discourse | =1.9.0-beta14 | |
Discourse Discourse | =1.9.0-beta15 | |
Discourse Discourse | =1.9.0-beta16 | |
Discourse Discourse | =1.9.0-beta17 | |
Discourse Discourse | =1.9.0-beta2 | |
Discourse Discourse | =1.9.0-beta3 | |
Discourse Discourse | =1.9.0-beta4 | |
Discourse Discourse | =1.9.0-beta5 | |
Discourse Discourse | =1.9.0-beta6 | |
Discourse Discourse | =1.9.0-beta7 | |
Discourse Discourse | =1.9.0-beta8 | |
Discourse Discourse | =1.9.0-beta9 | |
Discourse Discourse | =2.0.0-beta1 | |
Discourse Discourse | =2.0.0-beta10 | |
Discourse Discourse | =2.0.0-beta2 | |
Discourse Discourse | =2.0.0-beta3 | |
Discourse Discourse | =2.0.0-beta4 | |
Discourse Discourse | =2.0.0-beta5 | |
Discourse Discourse | =2.0.0-beta6 | |
Discourse Discourse | =2.0.0-beta7 | |
Discourse Discourse | =2.0.0-beta8 | |
Discourse Discourse | =2.0.0-beta9 | |
Discourse Discourse | =2.1.0-beta1 | |
Discourse Discourse | =2.1.0-beta2 | |
Discourse Discourse | =2.1.0-beta3 | |
Discourse Discourse | =2.1.0-beta4 | |
Discourse Discourse | =2.1.0-beta5 | |
Discourse Discourse | =2.1.0-beta6 | |
Discourse Discourse | =2.2.0-beta1 | |
Discourse Discourse | =2.2.0-beta10 | |
Discourse Discourse | =2.2.0-beta2 | |
Discourse Discourse | =2.2.0-beta3 | |
Discourse Discourse | =2.2.0-beta4 | |
Discourse Discourse | =2.2.0-beta5 | |
Discourse Discourse | =2.2.0-beta6 | |
Discourse Discourse | =2.2.0-beta7 | |
Discourse Discourse | =2.2.0-beta8 | |
Discourse Discourse | =2.2.0-beta9 | |
Discourse Discourse | =2.3.0-beta1 | |
Discourse Discourse | =2.3.0-beta10 | |
Discourse Discourse | =2.3.0-beta11 | |
Discourse Discourse | =2.3.0-beta2 | |
Discourse Discourse | =2.3.0-beta3 | |
Discourse Discourse | =2.3.0-beta4 | |
Discourse Discourse | =2.3.0-beta5 | |
Discourse Discourse | =2.3.0-beta6 | |
Discourse Discourse | =2.3.0-beta7 | |
Discourse Discourse | =2.3.0-beta8 | |
Discourse Discourse | =2.3.0-beta9 | |
Discourse Discourse | =2.4.0-beta1 | |
Discourse Discourse | =2.4.0-beta10 | |
Discourse Discourse | =2.4.0-beta11 | |
Discourse Discourse | =2.4.0-beta2 | |
Discourse Discourse | =2.4.0-beta3 | |
Discourse Discourse | =2.4.0-beta4 | |
Discourse Discourse | =2.4.0-beta5 | |
Discourse Discourse | =2.4.0-beta6 | |
Discourse Discourse | =2.4.0-beta7 | |
Discourse Discourse | =2.4.0-beta8 | |
Discourse Discourse | =2.4.0-beta9 | |
Discourse Discourse | =2.5.0-beta1 | |
Discourse Discourse | =2.5.0-beta2 | |
Discourse Discourse | =2.5.0-beta3 | |
Discourse Discourse | =2.5.0-beta4 | |
Discourse Discourse | =2.5.0-beta5 | |
Discourse Discourse | =2.5.0-beta6 | |
Discourse Discourse | =2.5.0-beta7 | |
Discourse Discourse | =2.6.0-beta1 | |
Discourse Discourse | =2.6.0-beta2 | |
Discourse Discourse | =2.6.0-beta3 | |
Discourse Discourse | =2.6.0-beta4 | |
Discourse Discourse | =2.6.0-beta5 | |
Discourse Discourse | =2.6.0-beta6 | |
Discourse Discourse | =2.7.0-beta1 | |
Discourse Discourse | =2.7.0-beta2 | |
Discourse Discourse | =2.7.0-beta3 | |
Discourse Discourse | =2.7.0-beta4 | |
Discourse Discourse | =2.7.0-beta5 | |
Discourse Discourse | =2.7.0-beta6 | |
Discourse Discourse | =2.7.0-beta7 | |
Discourse Discourse | =2.7.0-beta8 | |
Discourse Discourse | =2.7.0-beta9 | |
Discourse Discourse | =2.8.0-beta1 | |
Discourse Discourse | =2.8.0-beta10 | |
Discourse Discourse | =2.8.0-beta11 | |
Discourse Discourse | =2.8.0-beta2 | |
Discourse Discourse | =2.8.0-beta3 | |
Discourse Discourse | =2.8.0-beta4 | |
Discourse Discourse | =2.8.0-beta5 | |
Discourse Discourse | =2.8.0-beta6 | |
Discourse Discourse | =2.8.0-beta7 | |
Discourse Discourse | =2.8.0-beta8 | |
Discourse Discourse | =2.8.0-beta9 | |
Discourse Discourse | =2.9.0-beta1 | |
Discourse Discourse | =2.9.0-beta10 | |
Discourse Discourse | =2.9.0-beta11 | |
Discourse Discourse | =2.9.0-beta12 | |
Discourse Discourse | =2.9.0-beta13 | |
Discourse Discourse | =2.9.0-beta14 | |
Discourse Discourse | =2.9.0-beta2 | |
Discourse Discourse | =2.9.0-beta3 | |
Discourse Discourse | =2.9.0-beta4 | |
Discourse Discourse | =2.9.0-beta5 | |
Discourse Discourse | =2.9.0-beta6 | |
Discourse Discourse | =2.9.0-beta7 | |
Discourse Discourse | =2.9.0-beta8 | |
Discourse Discourse | =2.9.0-beta9 | |
Discourse Discourse | =3.0.0-beta15 | |
Discourse Discourse | =3.0.0-beta16 | |
Discourse Discourse | =3.1.0-beta1 | |
Discourse Discourse | =3.1.0-beta2 | |
Discourse Discourse | =3.1.0-beta3 | |
Discourse Discourse | =3.1.0-beta5 | |
Discourse Discourse | =3.1.0-beta6 |
Sign up to SecAlerts for real-time vulnerability data matched to your software, aggregated from hundreds of sources.