What is CVE-2023-44391 vulnerability?

CVE-2023-44391 is a vulnerability in Discourse, an open source platform for community discussion. It allows anonymous users to access user summaries even when the 'hide_user_profiles_from_public' feature is enabled.

What is the severity of CVE-2023-44391?

The severity of CVE-2023-44391 is medium, with a severity value of 5.3.

How can I fix CVE-2023-44391?

To fix CVE-2023-44391, users are advised to upgrade Discourse to the patched versions 3.1.1 stable or 3.2.0.beta2.

What is the affected software for CVE-2023-44391?

The affected software for CVE-2023-44391 is Discourse versions up to and including 3.1.1 stable and 3.2.0-beta1.

Where can I find more information about CVE-2023-44391?

More information about CVE-2023-44391 can be found at the following reference: [GitHub Security Advisory](https://github.com/discourse/discourse/security/advisories/GHSA-7px5-fqcf-7mfr)

Vulnerability/
CVE-2023-44391

medium

5.3

CWE

200

16/10/2023

16/9/2024

CVE-2023-44391: Prevent unauthorized access to summary details in Discourse

First published: Mon Oct 16 2023(Updated: )

Discourse is an open source platform for community discussion. User summaries are accessible for anonymous users even when `hide_user_profiles_from_public` is enabled. This problem has been patched in the 3.1.1 stable and 3.2.0.beta2 version of Discourse. Users are advised to upgrade. There are no known workarounds for this vulnerability.

Credit: security-advisories@github.com security-advisories@github.com

Affected Software	Affected Version	How to fix
Discourse Discourse	<=3.1.1
Discourse Discourse	=3.2.0-beta1

Never miss a vulnerability like this again

Reference Links

https://github.com/discourse/discourse/security/advisories/GHSA-7px5-fqcf-7mfr

Frequently Asked Questions

What is CVE-2023-44391 vulnerability?
CVE-2023-44391 is a vulnerability in Discourse, an open source platform for community discussion. It allows anonymous users to access user summaries even when the 'hide_user_profiles_from_public' feature is enabled.
What is the severity of CVE-2023-44391?
The severity of CVE-2023-44391 is medium, with a severity value of 5.3.
How can I fix CVE-2023-44391?
To fix CVE-2023-44391, users are advised to upgrade Discourse to the patched versions 3.1.1 stable or 3.2.0.beta2.
What is the affected software for CVE-2023-44391?
The affected software for CVE-2023-44391 is Discourse versions up to and including 3.1.1 stable and 3.2.0-beta1.
Where can I find more information about CVE-2023-44391?
More information about CVE-2023-44391 can be found at the following reference: [GitHub Security Advisory](https://github.com/discourse/discourse/security/advisories/GHSA-7px5-fqcf-7mfr)

collector/nvd-api
collector/nvd-index
agent/author
agent/type
agent/softwarecombine
collector/mitre-cve
source/MITRE
agent/title
agent/last-modified-date
agent/weakness
agent/references
agent/severity
agent/description
agent/tags
agent/first-publish-date
agent/event
vendor/discourse
canonical/discourse discourse
version/discourse discourse/3.1.1
version/discourse discourse/3.2.0-beta1

Company

Resources

Contact

SecAlerts Pty Ltd.
132 Wickham Terrace
Fortitude Valley,
QLD 4006, Australia
info@secalerts.co

By using SecAlerts services, you agree to our services end-user license agreement. This website is safeguarded by reCAPTCHA and governed by the Google Privacy Policy and Terms of Service. All names, logos, and brands of products are owned by their respective owners, and any usage of these names, logos, and brands for identification purposes only does not imply endorsement. If you possess any content that requires removal, please get in touch with us.