Servers and applications
CVE-2022-46168
Discourse is an option source discussion platform. Prior to version 2.8.14 on the `stable` branch and version 2.9.0.beta15 on the `beta` and `tests-passed` branches, recipients of a group SMTP email could see the email addresses of all other users inside the group SMTP topic. Most of the time this is not an issue as they are likely already familiar with one another's email addresses. This issue…
- Severity
- Low 3.5
- Published
- 5 Jan 2023
- Last changed
- 17 Jun 2026
- Added to UpHeron
- 21 Oct 2026
- Fixed in
- 2.8.14
- Sources
- NVD
Affected software
| Software | Affected versions |
|---|---|
DiscourseServers and applications · cpe:a:discourse:discourse |
All 15 release lines
|