Vulnerability · Published Sep 29, 2022 · Assigned by GitHub_M

CVE-2022-39232Discourse vulnerable to incomplete quote causing a topic to crash in the browser

Medium 6.5

In plain English

A medium-severity improper input validation in discourse from discourse. There are no confirmed reports of exploitation so far. The chance it is exploited in the next 30 days is estimated at 1.2% (higher than 69% of all known vulnerabilities).

Severity (CVSS 3.1)6.5Medium

Exploit odds (30 days)1.2%top 30.7% of all CVEs

Exploited in the wildNo reportsCISA SSVC: none

Attack toolingNoneno public tooling known

Official description

Discourse is an open source discussion platform. Starting with version 2.9.0.beta5 and prior to version 2.9.0.beta10, an incomplete quote can generate a JavaScript error which will crash the current page in the browser in some cases. Version 2.9.0.beta10 added a fix and tests to ensure incomplete quotes won't break the app. As a workaround, the quote can be fixed via the rails console.

Affected products (as reported)

Vendor	Product	Versions
discourse	discourse	>= 2.9.0.beta5, < 2.9.0.beta10

Weakness: CWE-20 · Vector: CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H

References

https://github.com/discourse/discourse/security/advisories/GHSA-cv64-v73f-7wq5 x_refsource_CONFIRM
https://github.com/discourse/discourse/pull/18311 x_refsource_MISC
https://github.com/discourse/discourse/commit/eab33af5bf19827527fe79134d865b5c727f6530 x_refsource_MISC