CVE-2023-44391

Summary

CVE-2023-44391 affects Discourse, an open-source community discussion platform. Despite having the "hide_user_profiles_from_public" feature enabled, user summaries remain accessible to anonymous users. This security flaw has been addressed in Discourse versions 3.1.1 stable and 3.2.0.beta2. It is strongly recommended that users upgrade to these patches as there are currently no known workarounds for this vulnerability.

Prevent cyber attacks with Recorded Future by prioritizing and patching critical vulnerabilities being exploited by threat actors targeting your industry. Book your demo to learn more.