Discourse before 2.3.0 and 2.4.x before 2.4.0.beta3 lacks a confirmation screen when logging in via a user-api OTP.
References
Configurations
Configuration 1 (hide)
|
History
03 Mar 2023, 17:30
Type | Values Removed | Values Added |
---|---|---|
CPE | cpe:2.3:a:discourse:discourse:2.4.0:beta1:*:*:*:*:*:* cpe:2.3:a:discourse:discourse:2.4.0:beta2:*:*:*:*:*:* |
Information
Published : 2019-07-29 13:15
Updated : 2023-12-10 12:59
NVD link : CVE-2019-1020017
Mitre link : CVE-2019-1020017
CVE.ORG link : CVE-2019-1020017
JSON object : View
Products Affected
discourse
- discourse
CWE