CVE-2023-45131 PoC — Discourse 信息泄露漏洞

Source

https://github.com/ibrahmsql/CVE-2023-45131

Associated Vulnerability

Title:Discourse 信息泄露漏洞 (CVE-2023-45131)
Description:Discourse是一套开源的社区讨论平台。该平台包括社区、电子邮件和聊天室等功能。 Discourse存在信息泄露漏洞，该漏洞源于允许攻击者通过向MessageBus发出POST请求来读取新的聊天消息。受影响的产品和版本：stable 3.1.0至3.1.1版本，beta 3.1.0.beta6至3.2.0.beta2版本，tests-passed 3.1.0.beta6至3.2.0.beta2版本。

Readme

# CVE-2023-45131

File Snapshot


 [4.0K]  /data/pocs/140ee262e5e57f02db290c3a5bfa3ba83ccc2ebe
├── [ 17K]  CVE-2023-45131.rb
├── [6.9K]  LICENSE
└── [  16]  README.md

0 directories, 3 files

Shenlong Bot has cached this for you

Remarks

1. It is advised to access via the original source first.

2. If the original source is unavailable, please email f.jinxu#gmail.com for a local snapshot (replace # with @).

3. Shenlong has snapshotted the POC code for you. To support long-term maintenance, please consider donating. Thank you for your support.

Goal Reached Thanks to every supporter — we hit 100%!