4.3

CVE-2026-72722

Discourse: Duplicate lookup reveals restricted topic titles through canonicalized URLs

Discourse is an open-source discussion platform. Prior to 2026.1.6, 2026.5.2, 2026.6.1, and 2026.7.0, TopicLink.extract_from, TopicLink.ensure_entry_for, and TopicLink.duplicate_lookup do not consistently enforce Guardian.can_see? checks when processing internal links. An authenticated user can submit links to restricted topics, private messages, or hidden posts and receive canonicalized slugs or titles in the composer_messages duplicate_lookup response even though the targets are not visible to that user. This issue is fixed in versions 2026.1.6, 2026.5.2, 2026.6.1, and 2026.7.0.
Daten sind bereitgestellt durch das CVE Programm von einer CVE Numbering Authority (CNA) (Unstrukturiert).
Herstellerdiscourse
≫
Produkt discourse
Version < 2026.1.6
Status affected
Version >= 2026.5.0-latest, < 2026.5.2
Status affected
Version >= 2026.6.0-latest, < 2026.6.1
Status affected
Version >= 2026.7.0-latest, < 2026.7.0
Status affected
VulnDex Vulnerability Enrichment
Diese Information steht angemeldeten Benutzern zur Verfügung. Login Login
Zu dieser CVE wurde keine Warnung gefunden.
EPSS Metriken
Typ Quelle Score Percentile
EPSS FIRST.org 0.32% 0.25
CVSS Metriken
Quelle Base Score Exploit Score Impact Score Vector String
security-advisories@github.com 4.3 2.8 1.4
CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:N
CWE-862 Missing Authorization

The product does not perform an authorization check when an actor attempts to access a resource or perform an action.

https://github.com/discourse/discourse/pull/42091
https://github.com/discourse/discourse/pull/42092
https://github.com/discourse/discourse/pull/42093
https://github.com/discourse/discourse/pull/42094
https://github.com/discourse/discourse/security/advisories/GHSA-4fx9-5m29-83p4
https://github.com/discourse/discourse/commit/45abd925e46e8be40d2d047bced26628f26e4e31
https://github.com/discourse/discourse/commit/7d7ce546ac86e24a6512b321ace69fc52fe37bf4
https://github.com/discourse/discourse/commit/836a251d54a1004fb1c463a7d299b933b176191f
https://github.com/discourse/discourse/commit/e54ba27eacee0f14f315e510e287e7ac2e4bdb1a