ID de Prueba:	1.3.6.1.4.1.25623.1.0.147389
Categoría:	Denial of Service
Título:	Discourse < 2.7.12 DoS Vulnerability
Resumen:	Discourse is prone to a denial of service (DoS) vulnerability.
Descripción:	Summary: Discourse is prone to a denial of service (DoS) vulnerability. Vulnerability Insight: Admins users can trigger a Denial of Service attack via the /message-bus/_diagnostics path. The impact of this vulnerability is greater on multisite Discourse instances (where multiple forums are served from a single application server) where any admin user on any of the forums are able to visit the /message-bus/_diagnostics path. Affected Software/OS: Discourse prior to version 2.7.12. Solution: Update to version 2.7.12 or later. CVSS Score: 4.0 CVSS Vector: AV:N/AC:L/Au:S/C:N/I:N/A:P
Referencia Cruzada:	Common Vulnerability Exposure (CVE) ID: CVE-2021-43850 https://github.com/discourse/discourse/security/advisories/GHSA-59jr-pj65-qmvr https://github.com/discourse/discourse/commit/7a8ec129fb54f188b2da6588c9d24d3a36eb0d39
Copyright	Copyright (C) 2022 Greenbone Networks GmbH

Esta es sólo una de 145615 pruebas de vulnerabilidad en nuestra serie de pruebas. Encuentre más sobre cómo ejecutar una auditoría de seguridad completa. Para ejecutar una prueba gratuita de esta vulnerabilidad contra su sistema, regístrese ahora.