CVE-2023-31142

Summary

CVE-2023-31142 affects Discourse, an open-source discussion platform. In certain versions of the software, including those preceding 3.0.4 in the `stable` branch and 3.1.0.beta5 in the `beta` and `tests-passed` branches, modified general category permissions can be reverted to their default settings. This vulnerability is addressed in the aforementioned versions. A workaround, applicable only when making category permission adjustments, is to create a new category instead.

Prevent cyber attacks with Recorded Future by prioritizing and patching critical vulnerabilities being exploited by threat actors targeting your industry. Book your demo to learn more.