| Package | Affected versions | Patched versions |
|---|---|---|
| discourse | = 2.7.0≤ 2.6.0 |
In Discourse 2.7.0 through beta1, a rate-limit bypass leads to a bypass of the 2FA requirement for certain forms.
Running one of these products? Scan your site to see whether it exposes a vulnerable version.
Scan my site free