CVE-2023-25172

Published on: Not Yet Published

Last Modified on: 03/17/2023 05:15:00 PM UTC

CVE-2023-25172 - advisory for GHSA-7pm2-prxw-wrvp

Certain versions of Discourse from Discourse contain the following vulnerability:

Discourse is an open-source discussion platform. Prior to version 3.0.1 of the `stable` branch and version 3.1.0.beta2 of the `beta` and `tests-passed` branches, a maliciously crafted URL can be included in a user's full name field to to carry out cross-site scripting attacks on sites with a disabled or overly permissive CSP (Content Security Policy). Discourse's default CSP prevents this vulnerability. The vulnerability is patched in version 3.0.1 of the `stable` branch and version 3.1.0.beta2 of the `beta` and `tests-passed` branches. As a workaround, enable and/or restore your site's CSP to the default one provided with Discourse.

CVE-2023-25172 has been assigned by [email protected] to track the vulnerability
Affected Vendor/Software: discourse - discourse version = stable < 3.0.1
Affected Vendor/Software: discourse - discourse version = beta < 3.1.0.beta2
Affected Vendor/Software: discourse - discourse version = tests-passed < 3.1.0.beta2

CVE References

Description	Tags ^ⓘ	Link
XSS user name displayed on post · Advisory · discourse/discourse · GitHub	github.com text/html	MISC github.com/discourse/discourse/security/advisories/GHSA-7pm2-prxw-wrvp
SECURITY: Prevent XSS in local oneboxes (#20009) · discourse/[email protected] · GitHub	github.com text/html	MISC github.com/discourse/discourse/commit/1a5a6f66cb821ed29a737311d6fdc2eba5adc915
SECURITY: Prevent XSS in local oneboxes by nbianca · Pull Request #20009 · discourse/discourse · GitHub	github.com text/html	MISC github.com/discourse/discourse/pull/20009
SECURITY: Prevent XSS in local oneboxes (#20008) · discourse/[email protected] · GitHub	github.com text/html	MISC github.com/discourse/discourse/commit/c186a46910431020e8efc425dec2133e7a99fa9a
SECURITY: Prevent XSS in local oneboxes by nbianca · Pull Request #20008 · discourse/discourse · GitHub	github.com text/html	MISC github.com/discourse/discourse/pull/20008

By selecting these links, you may be leaving CVEreport webspace. We have provided these links to other websites because they may have information that would be of interest to you. No inferences should be drawn on account of other sites being referenced, or not, from this page. There may be other websites that are more appropriate for your purpose. CVEreport does not necessarily endorse the views expressed, or concur with the facts presented on these sites. Further, CVEreport does not endorse any commercial products that may be mentioned on these sites. Please address comments about any linked pages to [email protected].

There are currently no QIDs associated with this CVE

Known Affected Software

Vendor	Product	Version
Discourse	discourse	= stable < 3.0.1
Discourse	discourse	= beta < 3.1.0.beta2
Discourse	discourse	= tests-passed < 3.1.0.beta2

No vendor comments have been submitted for this CVE

Social Mentions

Source	Title	Posted (UTC)
@CVEreport	CVE-2023-25172 : Discourse is an open-source discussion platform. Prior to version 3.0.1 of the `stable` branch and… twitter.com/i/web/status/1…	2023-03-17 17:01:50
/r/netcve	CVE-2023-25172	2023-03-17 17:38:05