CVE-2023-47119

Summary

CVE-2023-47119 is a vulnerability affecting Discourse, an open-source community discussion platform. Before the release of version 3.1.3 in the stable branch and version 3.2.0.beta3 in the beta and tests-passed branches, certain links could inject arbitrary HTML tags through Discourse's Onebox engine. This issue could lead to security risks when rendering these links. The vulnerability has been addressed in the mentioned releases, and no known workarounds are available.

Prevent cyber attacks with Recorded Future by prioritizing and patching critical vulnerabilities being exploited by threat actors targeting your industry. Book your demo to learn more.