CVE-2022-37458

Description

Discourse through 2.8.7 allows admins to send invitations to arbitrary email addresses at an unlimited rate.

Affected packages (1)

• Bitnami/discoursefrom 0, < 2.8.8

CVSS scores

References (4)

• WEBhttps://github.com/discourse/discourse/security/advisories/GHSA-q2rg-m477-8wg7
• WEBhttps://github.com/discourse/discourse/tags
• WEBhttps://nvd.nist.gov/vuln/detail/CVE-2022-37458
• WEBhttps://www.enisa.europa.eu/topics/threat-risk-management/vulnerability-disclosure