CVE-2024-45297

MEDIUM4.3EPSS 0.47%

Prevent topic list filtering by hidden tags for unauthorized users in Discourse

Published: 10/11/2024Modified: 5/20/2025

Also known as:GHSA-58xw-3qr3-53gpBIT-discourse-2024-45297

Description

Discourse is an open source platform for community discussion. Users can see topics with a hidden tag if they know the label/name of that tag. This issue has been patched in the latest stable, beta and tests-passed version of Discourse. All users area are advised to upgrade. There are no known workarounds for this vulnerability.

Affected packages (1)

Bitnami/discoursefrom 0, < 3.3.2

CVSS scores

Source	Version	Severity	Vector
osv	CVSS 3.1	MEDIUM4.3	CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:N

References (2)

WEBhttps://github.com/discourse/discourse/security/advisories/GHSA-58xw-3qr3-53gp
WEBhttps://nvd.nist.gov/vuln/detail/CVE-2024-45297