CVE-2023-40588

Summary

CVE-2023-40588 affects versions prior to 3.1.1 of Discourse's `stable` branch and 3.2.0.beta1 of the `beta` and `tests-passed` branches. This vulnerability allows malicious users to add a 2FA or security key with a specially crafted name to their account, causing a denial of service for other users. This issue has been patched in the aforementioned versions, with no known workarounds available. Discourse, an open-source discussion platform, is at risk of service disruptions if this vulnerability is exploited.

Prevent cyber attacks with Recorded Future by prioritizing and patching critical vulnerabilities being exploited by threat actors targeting your industry. Book your demo to learn more.