CVE-2022-21642 — Exposure of whisper participants in discourse
Discourse is an open source platform for community discussion. In affected versions when composing a message from topic the composer user suggestions reveals whisper participant…
Published: 2022-01-05 · CVSS: 4.3 · CVSS 3.1
Discourse is an open source platform for community discussion. In affected versions when composing a message from topic the composer user suggestions reveals whisper participants. The issue has been patched in stable version 2.7.13 and beta version 2.8.0.beta11. There is no workaround for this issue and users are advised to upgrade.
Source: CVE Program · Revision 8b16575c39f1e1810c5e863010da073d2d3285e7