CVE-2023-25167 — Regular expression denial of service via installing themes via git in discourse
Discourse is an open source discussion platform. In affected versions a malicious user can cause a regular expression denial of service using a carefully crafted git URL. This i…
Published: 2023-02-08 · CVSS: 6.5 · CVSS 3.1
Discourse is an open source discussion platform. In affected versions a malicious user can cause a regular expression denial of service using a carefully crafted git URL. This issue is patched in the latest stable, beta and tests-passed versions of Discourse. Users are advised to upgrade. There are no known workarounds for this issue.
Source: CVE Program · Revision 8b16575c39f1e1810c5e863010da073d2d3285e7