CVE-2023-46130: Bypassing height value allowed in some theme components
First published: Fri Nov 10 2023(Updated: )
Discourse is an open source platform for community discussion. Prior to version 3.1.3 of the `stable` branch and version 3.2.0.beta3 of the `beta` and `tests-passed` branches, some theme components allow users to add svgs with unlimited `height` attributes, and this can affect the availability of subsequent replies in a topic. Most Discourse instances are unaffected, only instances with the svgbob or the mermaid theme component are within scope. The issue is patched in version 3.1.3 of the `stable` branch and version 3.2.0.beta3 of the `beta` and `tests-passed` branches. As a workaround, disable or remove the relevant theme components.
Credit: security-advisories@github.com
| Affected Software | Affected Version | How to fix |
|---|---|---|
| Discourse Discourse | <3.1.3 | |
| Discourse Discourse | <3.2.0 | |
| Discourse Discourse | =3.2.0-beta1 | |
| Discourse Discourse | =3.2.0-beta2 |
Never miss a vulnerability like this again
Sign up to SecAlerts for real-time vulnerability data matched to your software, aggregated from hundreds of sources.
Reference Links
Frequently Asked Questions
What is the vulnerability ID of this vulnerability?
The vulnerability ID of this vulnerability is CVE-2023-46130.
What is the severity level of CVE-2023-46130?
The severity level of CVE-2023-46130 is medium with a CVSS score of 5.4.
How does CVE-2023-46130 affect Discourse?
CVE-2023-46130 affects Discourse prior to version 3.1.3 of the `stable` branch and version 3.2.0.beta3 of the `beta` and `tests-passed` branches.
What is the impact of the vulnerability CVE-2023-46130?
The vulnerability allows users to bypass the height value restriction in some theme components, which can affect the availability of certain resources.
How can I fix the vulnerability CVE-2023-46130?
To fix the vulnerability CVE-2023-46130, please update Discourse to version 3.1.3 for the `stable` branch and version 3.2.0.beta3 for the `beta` and `tests-passed` branches.
- collector/nvd-api
- agent/type
- agent/event
- collector/mitre-cve
- source/MITRE
- agent/weakness
- agent/title
- agent/remedy
- agent/last-modified-date
- agent/severity
- agent/softwarecombine
- agent/tags
- agent/author
- agent/references
- agent/first-publish-date
- agent/description
- vendor/discourse
- canonical/discourse discourse
- version/discourse discourse/3.2.0-beta1
- version/discourse discourse/3.2.0-beta2