CVE-2023-49098 — Reaction data for user notifications exposed in Discourse-reactions
Discourse-reactions is a plugin that allows user to add their reactions to the post. Data about a user's reaction notifications could be exposed. This vulnerability was patched …
Published: 2024-01-12 · CVSS: 3.5 · CVSS 3.1
Discourse-reactions is a plugin that allows user to add their reactions to the post. Data about a user's reaction notifications could be exposed. This vulnerability was patched in commit 2c26939.
Source: CVE Program · Revision 8b16575c39f1e1810c5e863010da073d2d3285e7