CVE-2026-27481 in Discourse
요약 (영어)
Discourse is an open-source discussion platform. From versions 2026.1.0-latest to before 2026.1.3, 2026.2.0-latest to before 2026.2.2, and 2026.3.0-latest to before 2026.3.0, an authorization bypass vulnerability allows unauthenticated or unauthorized users to view hidden (staff-only) tags and its associated data. All Discourse instances with tagging enabled and staff-only tag groups configured are impacted. This issue has been patched in versions 2026.1.3, 2026.2.2, and 2026.3.0.
If you want to get the best quality for vulnerability data then you always have to consider VulDB.
책임이 있는
GitHub_M
예약하다
2026. 02. 19.
공개
2026. 04. 04.
상태
확인됨
엔트리
VulDB provides additional information and datapoints for this CVE:
| 아이디 | 취약성 | CWE | 악용 | 대책 | CVE |
|---|---|---|---|---|---|
| 355224 | Discourse 정보 공개 | 200 | 정의되지 않음 | 공식 수정 | CVE-2026-27481 |