CVE-2022-31184

HighCVSS 7.5/10Last modified Jun 17, 2026

Description

Discourse is the an open source discussion platform. In affected versions an email activation route can be abused to send mass spam emails. A fix has been included in the latest stable, beta and tests-passed versions of Discourse which rate limits emails. Users are advised to upgrade. Users unable to upgrade should manually rate limit email.

Metrics

CVSS 3.1 7.5/10CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H

Weakness enumeration

CWE-770

Affected software

No affected versions have been published.

Timeline

Published
Aug 1, 2022
Last modified
Jun 17, 2026
NVD status
Modified

Related CVEs from 2022

CVE-2022-311855.3mprweb is a hosting platform for the makedeb Package Repository. Email addresses were found to not have been hidden, even if a user had clicCVE-2022-311863.3NextAuth.js is a complete open source authentication solution for Next.js applications. An information disclosure vulnerability in `next-autCVE-2022-311875.4GLPI stands for Gestionnaire Libre de Parc Informatique and is a Free Asset and IT Management Software package, that provides ITIL Service DCVE-2022-311889.8CVAT is an opensource interactive video and image annotation tool for computer vision. Versions prior to 2.0.0 were found to be subject to aCVE-2022-311895.3DSpace open source software is a repository application which provides durable access to digital resources. dspace-jspui is a UI component fCVE-2022-31197.5The OAuth client Single Sign On WordPress plugin before 3.0.4 does not have authorisation and CSRF when updating its settings, which could aCVE-2022-311905.3DSpace open source software is a repository application which provides durable access to digital resources. dspace-xmlui is a UI component fCVE-2022-311916.1DSpace open source software is a repository application which provides durable access to digital resources. dspace-jspui is a UI component fCVE-2022-311926.1DSpace open source software is a repository application which provides durable access to digital resources. dspace-jspui is a UI component fCVE-2022-311936.1DSpace open source software is a repository application which provides durable access to digital resources. dspace-jspui is a UI component fCVE-2022-311947.2DSpace open source software is a repository application which provides durable access to digital resources. dspace-jspui is a UI component fCVE-2022-311957.2DSpace open source software is a repository application which provides durable access to digital resources. In affected versions the ItemImp