CVE-2023-25819

—

CVSS 3.1

5.3 medium

EPSS

<1%p41

Published

Mar 4, 2023 (Mar 4, 2023)

Modified

Jun 17, 2026

Description

Discourse is an open source platform for community discussion. Tags that are normally private are showing in metadata. This affects any site running the `tests-passed` or `beta` branches >= 3.1.0.beta2. The issue is patched in the latest `beta` and `tests-passed` version of Discourse.

Vendors: discourse
Products: discourse
Weakness: CWE-359, CWE-200
Vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N

NVD CVE.org GitHub PoCs EPSS (0.5%)

In the news0 stories

No ingested article mentions this CVE yet.