← Database

CVE-2022-31184

MEDIUM CVSS: 6.5 Published: 2022-08-01 Modified: 2026-06-17

Description

Discourse is the an open source discussion platform. In affected versions an email activation route can be abused to send mass spam emails. A fix has been included in the latest stable, beta and tests-passed versions of Discourse which rate limits emails. Users are advised to upgrade. Users unable to upgrade should manually rate limit email.

Affected Platforms

Discourse Discourse

Weakness Type

CWE-770

References