CVE-2023-48297

Summary

CVE-2023-48297 affects Discourse, a community discussion platform. This vulnerability stems from the message serializer's handling of expanded chat mentions, specifically "@all" and "@here," which can result in an unusually long array of users. This issue, if exploited, could potentially lead to performance degradation or even denial-of-service attacks. Discourse has addressed this concern by releasing patches in versions 3.1.4 and beta 3.2.0.beta5.

Prevent cyber attacks with Recorded Future by prioritizing and patching critical vulnerabilities being exploited by threat actors targeting your industry. Book your demo to learn more.