CVE-2023-43659

概要

参考情報

• developer.mozilla.org/en-US/docs/Web/HTTP/CSP · Third Party Advisory
• discourse/discourse security advisory · Vendor Advisory

discourse のその他の脆弱性

• CVE-2026-59828中 5.3Discourse is an open-source discussion platform. Prior to 2026.6.0, 2026.5.1, 2026.4.2, and 2026.1.5, post revisions that should be hidden f…
• CVE-2026-55424中 5.4Discourse is an open-source discussion platform. Prior to 2026.6.0, 2026.5.1, 2026.4.2, and 2026.1.5, a topic "featured link" was not suffic…
• CVE-2026-53963緊急 9.0Discourse is an open-source discussion platform. Prior to 2026.6.0, 2026.5.1, 2026.4.2, and 2026.1.5, a malicious second factor name on an a…
• CVE-2026-53962中 5.4Discourse is an open-source discussion platform. Prior to 2026.6.0, 2026.5.1, 2026.4.2, and 2026.1.5, insufficient SVG sanitization in uploa…
• CVE-2026-53961中 6.5Discourse is an open-source discussion platform. Prior to 2026.6.0, 2026.5.1, 2026.4.2, and 2026.1.5, the AWS SES bounce webhook at POST /we…