Description
discourse-group-membership-ip-block is a discourse plugin that adds support for adding users to groups based on their IP address. discourse-group-membership-ip-block was sending all group custom fields to the client, including group custom fields from other plugins which may expect their custom fields to remain secret.
CVSS breakdown
CVSS 3.1
Attack Vector
Network
Attack Complexity
Low
Privileges Required
Low
User Interaction
None
Scope
Unchanged
Confidentiality
Low
Integrity
None
Availability
None
Affected products
- discourse / discourse-group-membership-ip-block< b394d61b0bdfd18a2d8310aa5cf26cccf8bd31c1 – < b394d61b0bdfd18a2d8310aa5cf26cccf8bd31c1