5.4

CVE-2023-45806

Discourse vulnerable to DoS via Regexp Injection in Full Name

Discourse is an open source platform for community discussion. Prior to version 3.1.3 of the `stable` branch and version 3.2.0.beta3 of the `beta` and `tests-passed` branches, if a user has been quoted and uses a `|` in their full name, they might be able to trigger a bug that generates a lot of duplicate content in all the posts they've been quoted by updating their full name again. Version 3.1.3 of the `stable` branch and version 3.2.0.beta3 of the `beta` and `tests-passed` branches contain a patch for this issue. No known workaround exists, although one can stop the "bleeding" by ensuring users only use alphanumeric characters in their full name field.
Daten sind bereitgestellt durch National Vulnerability Database (NVD)
Discourse ≫ Discourse SwEdition stable Version < 3.1.3
Discourse ≫ Discourse SwEdition beta Version < 3.2.0
Discourse ≫ Discourse Version 3.2.0 Update beta1 SwEdition beta
Discourse ≫ Discourse Version 3.2.0 Update beta2 SwEdition beta
Zu dieser CVE wurde keine Warnung gefunden.
EPSS Metriken
Typ Quelle Score Percentile
EPSS FIRST.org 1% 0.582
CVSS Metriken
Quelle Base Score Exploit Score Impact Score Vector String
NIST 5.4 2.8 2.5
CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:L/A:L
security-advisories@github.com 4.3 2.8 1.4
CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:L
CWE-1333 Inefficient Regular Expression Complexity

The product uses a regular expression with a worst-case computational complexity that is inefficient and possibly exponential.

https://github.com/discourse/discourse/commit/2ec25105179199cf80912bf011c18b8b870e1863
Patch
https://github.com/discourse/discourse/commit/7d484864fe91ff79c478f57e7ddb1235d701921e
Patch
https://github.com/discourse/discourse/security/advisories/GHSA-hcgf-hg2g-mw78
Patch
Vendor Advisory