CVE-2021-3138 PoC — Discourse 安全漏洞

Source

Associated Vulnerability

Description

Discource POC

Readme

# ..| Discourse 2.7.0 - CVE-2021-3138 |..

# Description :
<br>
<b>Rate limit Bypass which leads to 2FA Bypass
</b><br>
<h1>Tested Version :</h1>
<br>
<b>2.7.0
</b><br>
<h1>Attack Type: </h1>
<br>
<b>Remote
</b>
<br>
<h1>Impact :<br></h1>
<b>2FA Bypass
</b><br>
<h1>Vendor of Product :</h1>
<br>
<b>https://www.discourse.org
</b><br>
<h1>Additional Information :</h1>
<b><br>
Discourse is discussion platform built for the next decade of the Internet .Used as:<br>
-mailing list<br>
-discussion forum<br>
-long-form chat room<br>
<br>
and there are well known companies such as Google acquisitions that have been using Discourse until this moment.
<br>
</b>
<h1>Discoverer :</h1>
<b><br>
Meshal Almansour<br>
Twitter: mesh3l_911
<br>
</b>

File Snapshot

 [4.0K]  /data/pocs/8a566b56751ec32b7ca360cbfe5da6e95ec19778
├── [1.9K]  exploit.py
├── [ 741]  README.md
└── [ 496]  Requests_number.py

0 directories, 3 files

Remarks