CVE-2023-28112

Published on: Not Yet Published

Last Modified on: 03/17/2023 07:15:00 PM UTC

CVE-2023-28112 - advisory for GHSA-9897-x229-55gh

Certain versions of Discourse from Discourse contain the following vulnerability:

Discourse is an open-source discussion platform. Prior to version 3.1.0.beta3 of the `beta` and `tests-passed` branches, some user provided URLs were being passed to FastImage without SSRF protection. Insufficient protections could enable attackers to trigger outbound network connections from the Discourse server to private IP addresses. This affects any site running the `tests-passed` or `beta` branches versions 3.1.0.beta2 and prior. This issue is patched in version 3.1.0.beta3 of the `beta` and `tests-passed` branches. There are no known workarounds.

CVE-2023-28112 has been assigned by [email protected] to track the vulnerability
Affected Vendor/Software: discourse - discourse version = beta < 3.1.0.beta3
Affected Vendor/Software: discourse - discourse version = tests-passed < 3.1.0.beta3

CVE References

Description	Tags ^ⓘ	Link
SECURITY: Add FinalDestination::FastImage that's SSRF safe · discourse/[email protected] · GitHub	github.com text/html	MISC github.com/discourse/discourse/commit/39c2f63b35d90ebaf67b9604cf1d424e5984203c
SECURITY: Multiple commits for version bump beta3 by oblakeerickson · Pull Request #20710 · discourse/discourse · GitHub	github.com text/html	MISC github.com/discourse/discourse/pull/20710
SSRF protection missing for some FastImage requests · Advisory · discourse/discourse · GitHub	github.com text/html	MISC github.com/discourse/discourse/security/advisories/GHSA-9897-x229-55gh

By selecting these links, you may be leaving CVEreport webspace. We have provided these links to other websites because they may have information that would be of interest to you. No inferences should be drawn on account of other sites being referenced, or not, from this page. There may be other websites that are more appropriate for your purpose. CVEreport does not necessarily endorse the views expressed, or concur with the facts presented on these sites. Further, CVEreport does not endorse any commercial products that may be mentioned on these sites. Please address comments about any linked pages to [email protected].

There are currently no QIDs associated with this CVE

Known Affected Software

Vendor	Product	Version
Discourse	discourse	= beta < 3.1.0.beta3
Discourse	discourse	= tests-passed < 3.1.0.beta3

No vendor comments have been submitted for this CVE

Social Mentions

Source	Title	Posted (UTC)
@CVEreport	CVE-2023-28112 : Discourse is an open-source discussion platform. Prior to version 3.1.0.beta3 of the `beta` and `t… twitter.com/i/web/status/1…	2023-03-17 19:04:16