CVE-2022-41944

MediumCVSS 4.3/10Last modified Jun 17, 2026

Description

Discourse is an open-source discussion platform. In stable versions prior to 2.8.12 and beta or tests-passed versions prior to 2.9.0.beta.13, under certain conditions, a user can see notifications for topics they no longer have access to. If there is sensitive information in the topic title, it will therefore have been exposed. This issue is patched in stable version 2.8.12, beta version 2.9.0.beta13, and tests-passed version 2.9.0.beta13. There are no workarounds available.

Metrics

CVSS 3.1 4.3/10CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:N

Weakness enumeration

CWE-200CWE-863

Affected software

No affected versions have been published.

Timeline

Published
Nov 28, 2022
Last modified
Jun 17, 2026
NVD status
Modified

Related CVEs from 2022

CVE-2022-419459.8super-xray is a vulnerability scanner (xray) GUI launcher. In version 0.1-beta, the URL is not filtered and directly spliced ​​into the commCVE-2022-419465.5pgjdbc is an open source postgresql JDBC Driver. In affected versions a prepared statement using either `PreparedStatement.setText(int, InpuCVE-2022-419475.4DHIS 2 is an open source information system for data capture, management, validation, analytics and visualization. Through various features CVE-2022-419487.2DHIS 2 is an open source information system for data capture, management, validation, analytics and visualization. Affected versions are subCVE-2022-419494.3DHIS 2 is an open source information system for data capture, management, validation, analytics and visualization. In affected versions an aCVE-2022-41954.3Insufficient policy enforcement in Safe Browsing in Google Chrome prior to 108.0.5359.71 allowed a remote attacker to bypass Safe Browsing wCVE-2022-419507.8super-xray is the GUI alternative for vulnerability scanning tool xray. In 0.2-beta, a privilege escalation vulnerability was discovered. ThCVE-2022-419519.8OroPlatform is a PHP Business Application Platform (BAP) designed to make development of custom business applications easier and faster. PatCVE-2022-419525.3Synapse before 1.52.0 with URL preview functionality enabled will attempt to generate URL previews for media stream URLs without properly liCVE-2022-419537.8Git GUI is a convenient graphical tool that comes with Git for Windows. Its target audience is users who are uncomfortable with using Git onCVE-2022-419543.3MPXJ is an open source library to read and write project plans from a variety of file formats and databases. On Unix-like operating systems CVE-2022-419558.8Autolab is a course management service, initially developed by a team of students at Carnegie Mellon University, that enables instructors to
CVE-2022-41944: Medium severity, CVSS 4.3 | Vulnix