All vulnerabilities

Servers and applications

CVE-2022-31096

Discourse is an open source discussion platform. Under certain conditions, a logged in user can redeem an invite with an email that either doesn't match the invite's email or does not adhere to the email domain restriction of an invite link. The impact of this flaw is aggravated when the invite has been configured to add the user that accepts the invite into restricted groups. Once a user has…

Severity
Medium 5.7
Published
27 Jun 2022
Last changed
17 Jun 2026
Added to UpHeron
21 Oct 2026
Sources
NVD

Affected software

SoftwareAffected versions
DiscourseServers and applications · cpe:a:discourse:discourse
  • Every version up to 2.8.4
  • Version 2.9.0-beta1
  • Version 2.9.0-beta2
  • Version 2.9.0-beta3
  • Version 2.9.0-beta4
  • Version 2.9.0-beta5

References

  • NVD https://nvd.nist.gov/vuln/detail/CVE-2022-31096
  • CVE.org https://www.cve.org/CVERecord?id=CVE-2022-31096