Discourse up to 2.7.0 beta1 2FA improper authentication

entryeditHistoryDiffjsonxmlCTI

A vulnerability was found in Discourse up to 2.7.0 beta1. It has been rated as critical. This issue affects an unknown part of the component 2FA Handler. There is no information about possible countermeasures known. It may be suggested to replace the affected object with an alternative product.

Timeline

The analysis of the timeline helps to identify the required approach and handling of single vulnerabilities and vulnerability collections. This overview makes it possible to see less important slices and more severe hotspots at a glance. Initiating immediate vulnerability response and prioritizing of issues is possible.

User

Field

Commit Conf

Approve Conf

ID	Commited	User	Field	Change	Remarks	Moderated	Reason	C
10827036	01/14/2021	VulD...	price_0day	$0-$5k	see documentation	01/14/2021	accepted	90
10827035	01/14/2021	VulD...	cvss3_meta_tempscore	6.3	see documentation	01/14/2021	accepted	90
10827034	01/14/2021	VulD...	cvss3_meta_basescore	6.3	see documentation	01/14/2021	accepted	90
10827033	01/14/2021	VulD...	cvss3_vuldb_tempscore	6.3		01/14/2021	accepted	90
10827032	01/14/2021	VulD...	cvss3_vuldb_basescore	6.3		01/14/2021	accepted	90
10827031	01/14/2021	VulD...	cvss2_vuldb_tempscore	5.8		01/14/2021	accepted	90
10827030	01/14/2021	VulD...	cvss2_vuldb_basescore	5.8		01/14/2021	accepted	90
10827029	01/14/2021	VulD...	cvss3_vuldb_rc	X	derived from historical data	01/14/2021	accepted	80
10827028	01/14/2021	VulD...	cvss3_vuldb_rl	X	derived from historical data	01/14/2021	accepted	80
10827027	01/14/2021	VulD...	cvss3_vuldb_e	X	derived from historical data	01/14/2021	accepted	80
10827026	01/14/2021	VulD...	cvss3_vuldb_s	U	derived from historical data	01/14/2021	accepted	80
10827025	01/14/2021	VulD...	cvss3_vuldb_ui	N	derived from historical data	01/14/2021	accepted	80
10827024	01/14/2021	VulD...	cvss3_vuldb_av	A	derived from historical data	01/14/2021	accepted	80
10827023	01/14/2021	VulD...	cvss2_vuldb_rc	ND	derived from historical data	01/14/2021	accepted	80
10827022	01/14/2021	VulD...	cvss2_vuldb_rl	ND	derived from historical data	01/14/2021	accepted	80
10827021	01/14/2021	VulD...	cvss2_vuldb_e	ND	derived from historical data	01/14/2021	accepted	80
10827020	01/14/2021	VulD...	cvss2_vuldb_av	A	derived from historical data	01/14/2021	accepted	80
10827019	01/14/2021	VulD...	cvss2_vuldb_ai	P	derived from vuldb v3 vector	01/14/2021	accepted	80
10827018	01/14/2021	VulD...	cvss2_vuldb_ii	P	derived from vuldb v3 vector	01/14/2021	accepted	80
10827017	01/14/2021	VulD...	cvss2_vuldb_ci	P	derived from vuldb v3 vector	01/14/2021	accepted	80