All vulnerabilities

Servers and applications

CVE-2022-21677

Discourse is an open source discussion platform. Discourse groups can be configured with varying visibility levels for the group as well as the group members. By default, a newly created group has its visibility set to public and the group's members visibility set to public as well. However, a group's visibility and the group's members visibility can be configured such that it is restricted to…

Severity
Medium 5.3
Published
14 Jan 2022
Last changed
17 Jun 2026
Added to UpHeron
21 Oct 2026
Sources
NVD

Affected software

SoftwareAffected versions
DiscourseServers and applications · cpe:a:discourse:discourse
  • Version 2.8.0-beta10
  • Version 2.8.0-beta9
  • Version 2.8.0-beta8
  • Version 2.8.0-beta7
All 11 release lines
  • Every version up to 2.7.12
  • Version 2.8.0-beta1
  • Version 2.8.0-beta2
  • Version 2.8.0-beta3
  • Version 2.8.0-beta4
  • Version 2.8.0-beta5
  • Version 2.8.0-beta6
  • Version 2.8.0-beta7
  • Version 2.8.0-beta8
  • Version 2.8.0-beta9
  • Version 2.8.0-beta10

References

  • NVD https://nvd.nist.gov/vuln/detail/CVE-2022-21677
  • CVE.org https://www.cve.org/CVERecord?id=CVE-2022-21677