CVE-2022-39232

MEDIUM6.5EPSS 0.60%
發布日:2024/3/6修改日:2025/10/14
也稱為:GHSA-cv64-v73f-7wq5BIT-discourse-2022-39232

描述

Discourse is an open source discussion platform. Starting with version 2.9.0.beta5 and prior to version 2.9.0.beta10, an incomplete quote can generate a JavaScript error which will crash the current page in the browser in some cases. Version 2.9.0.beta10 added a fix and tests to ensure incomplete quotes won't break the app. As a workaround, the quote can be fixed via the rails console.

受影響套件(1)

  • Bitnami/discourse>= 2.9.0-beta5, <= 2.9.0-beta5, >= 2.9.0-beta6, <= 2.9.0-beta6, >= 2.9.0-beta7, <= 2.9.0-beta7, >= 2.9.0-beta8, <= 2.9.0-beta8, >= 2.9.0-beta9, <= 2.9.0-beta9

CVSS 分數

來源版本嚴重程度向量
osvCVSS 3.1MEDIUM6.5CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H

參考連結(3)