VulnerabilityModified

CVE-2023-36473

A CSP (Content Security Policy) nonce reuse vulnerability could allow XSS attacks to bypass CSP protection.

MEDIUM 6.1EPSS 0.40%

Does this matter?

Lower severity and a low EPSS score (0.40%). Track it; it rarely justifies an emergency change on its own.

Description

Discourse is an open source discussion platform. A CSP (Content Security Policy) nonce reuse vulnerability could allow XSS attacks to bypass CSP protection. There are no known XSS vectors at the moment, but should one be discovered, this vulnerability would allow the XSS attack to completely bypass CSP. The vulnerability is patched in the latest tests-passed, beta and stable branches.

CVSS 3.1: 6.1 MEDIUMCVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N
EPSS: 0.40% probability · 33th percentile
CISA KEV: Not listed
Weakness: CWE-79
Affected: discourse/discourse
Source: security-advisories@github.com

References

https://github.com/discourse/discourse/security/advisories/GHSA-9f52-624j-8ppqVendor Advisory
https://github.com/discourse/discourse/security/advisories/GHSA-9f52-624j-8ppqVendor Advisory

Source: NVD record, EPSS from FIRST.org, KEV from CISA. Refreshed daily.