All vulnerabilities

Servers and applications

CVE-2022-41944

Discourse is an open-source discussion platform. In stable versions prior to 2.8.12 and beta or tests-passed versions prior to 2.9.0.beta.13, under certain conditions, a user can see notifications for topics they no longer have access to. If there is sensitive information in the topic title, it will therefore have been exposed. This issue is patched in stable version 2.8.12, beta version…

Severity
Medium 4.3
Published
28 Nov 2022
Last changed
17 Jun 2026
Added to UpHeron
21 Oct 2026
Sources
NVD

Affected software

SoftwareAffected versions
DiscourseServers and applications · cpe:a:discourse:discourse
  • Version 2.9.0-beta12
  • Version 2.9.0-beta11
  • Version 2.9.0-beta10
  • Version 2.9.0-beta9
All 13 release lines
  • Every version up to 2.8.11
  • Version 2.9.0-beta1
  • Version 2.9.0-beta2
  • Version 2.9.0-beta3
  • Version 2.9.0-beta4
  • Version 2.9.0-beta5
  • Version 2.9.0-beta6
  • Version 2.9.0-beta7
  • Version 2.9.0-beta8
  • Version 2.9.0-beta9
  • Version 2.9.0-beta10
  • Version 2.9.0-beta11
  • Version 2.9.0-beta12

References

  • NVD https://nvd.nist.gov/vuln/detail/CVE-2022-41944
  • CVE.org https://www.cve.org/CVERecord?id=CVE-2022-41944