CVE-2023-22468

Discourse cross-site scripting | CVE-2023-22468

January 29, 2023

NAME__________Discourse cross-site scriptingPlatforms Affected:Discourse Discourse 3.0.0 Discourse Discourse 3.1.0.beta1Risk Level:8.3Exploitability:HighConsequences:Cross-Site Scripting DESCRIPTION__________Discourse is vulnerable to cross-site scripting, caused by improper...

CVE-2023-22468

Discourse cross-site scripting | CVE-2023-22468

HackerOne Bug Bounty Disclosure: a-user-with-only-modify-settings-permmision-could-takeover-any-user-accounts-osama-hamad

HackerOne Bug Bounty Disclosure: changing-the-administrator-password-via-admin-console-does-not-invalidate-other-sessions-osama-hamad

CISA: Vulnerability Summary for the Week of May 13, 2024

Microsoft Edge Multiple Vulnerabilities

CISA: Microsoft Releases May 2024 Security Updates

Discourse cross-site scripting | CVE-2023-22468

You may have missed

HackerOne Bug Bounty Disclosure: a-user-with-only-modify-settings-permmision-could-takeover-any-user-accounts-osama-hamad

HackerOne Bug Bounty Disclosure: changing-the-administrator-password-via-admin-console-does-not-invalidate-other-sessions-osama-hamad

CISA: Vulnerability Summary for the Week of May 13, 2024

Microsoft Edge Multiple Vulnerabilities

CISA: Microsoft Releases May 2024 Security Updates