Vulnerability Information
Although we use advanced large model technology, its output may still contain inaccurate or outdated information.Shenlong tries to ensure data accuracy, but please verify and judge based on the actual situation.
Vulnerability Title
Insufficient control of custom field value sizes
Vulnerability Description
Discourse is a platform for community discussion. For fields that are client editable, limits on sizes are not imposed. This allows a malicious actor to cause a Discourse instance to use excessive disk space and also often excessive bandwidth. The issue is patched 3.1.4 and 3.2.0.beta4.
CVSS Information
CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:L
Vulnerability Type
未加控制的资源消耗(资源穷尽)
Vulnerability Title
Discourse 资源管理错误漏洞
Vulnerability Description
Discourse是一套开源的社区讨论平台。该平台包括社区、电子邮件和聊天室等功能。 Discourse 3.2.0.beta4之前、3.1.4之前版本存在资源管理错误漏洞，该漏洞源于对客户端可编辑的字段不施加大小限制，攻击者利用该漏洞可以导致 Discourse 实例使用过多的磁盘空间和带宽。
CVSS Information
N/A
Vulnerability Type
N/A