Vulnerability   
Search   
    Search 324607 CVE descriptions
and 145615 test descriptions,
access 10,000+ cross references.
Tests   CVE   All  

CVE ID:CVE-2023-38498
Description:Discourse is an open source discussion platform. Prior to version 3.0.6 of the `stable` branch and version 3.1.0.beta7 of the `beta` and `tests-passed` branches, a malicious user can prevent the defer queue from proceeding promptly on sites hosted in the same multisite installation. The issue is patched in version 3.0.6 of the `stable` branch and version 3.1.0.beta7 of the `beta` and `tests-passed` branches. There are no known workarounds for this vulnerability. Users of multisite configurations should upgrade.
Test IDs: 1.3.6.1.4.1.25623.1.0.150797   1.3.6.1.4.1.25623.1.0.150798  
Cross References: Common Vulnerability Exposure (CVE) ID: CVE-2023-38498
https://github.com/discourse/discourse/commit/26e267478d785e2f32ee7da4613e2cf4a65ff182
https://github.com/discourse/discourse/commit/26e267478d785e2f32ee7da4613e2cf4a65ff182
https://github.com/discourse/discourse/security/advisories/GHSA-wv29-rm3f-4g2j
https://github.com/discourse/discourse/security/advisories/GHSA-wv29-rm3f-4g2j




© 1998-2025 E-Soft Inc. All rights reserved.