Vulnerability · Published Jul 28, 2023 · Assigned by GitHub_M

CVE-2023-38498Discourse vulnerable to DoS via defer queue

Medium 4.3

In plain English

A medium-severity uncontrolled resource consumption in discourse from discourse. There are no confirmed reports of exploitation so far. The chance it is exploited in the next 30 days is estimated at 0.7% (higher than 53% of all known vulnerabilities).

Severity (CVSS 3.1)4.3Medium

Exploit odds (30 days)0.7%top 46.7% of all CVEs

Exploited in the wildNo reportsCISA SSVC: none

Attack toolingNoneno public tooling known

Official description

Discourse is an open source discussion platform. Prior to version 3.0.6 of the `stable` branch and version 3.1.0.beta7 of the `beta` and `tests-passed` branches, a malicious user can prevent the defer queue from proceeding promptly on sites hosted in the same multisite installation. The issue is patched in version 3.0.6 of the `stable` branch and version 3.1.0.beta7 of the `beta` and `tests-passed` branches. There are no known workarounds for this vulnerability. Users of multisite configurations should upgrade.

Affected products (as reported)

Vendor	Product	Versions
discourse	discourse	>= 3.1.0.beta1, < 3.1.0.beta7< 3.0.6

Weakness: CWE-400, CWE-770 · Vector: CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:L

References

https://github.com/discourse/discourse/security/advisories/GHSA-wv29-rm3f-4g2j x_refsource_CONFIRM
https://github.com/discourse/discourse/commit/26e267478d785e2f32ee7da4613e2cf4a65ff182 x_refsource_MISC