CVE-2021-3138 PoC — Discourse 安全漏洞

Description

Discource POC

介绍

# ..| Discourse 2.7.0 - CVE-2021-3138 |..

# Description :
<br>
<b>Rate limit Bypass which leads to 2FA Bypass
</b><br>
<h1>Tested Version :</h1>
<br>
<b>2.7.0
</b><br>
<h1>Attack Type: </h1>
<br>
<b>Remote
</b>
<br>
<h1>Impact :<br></h1>
<b>2FA Bypass
</b><br>
<h1>Vendor of Product :</h1>
<br>
<b>https://www.discourse.org
</b><br>
<h1>Additional Information :</h1>
<b><br>
Discourse is discussion platform built for the next decade of the Internet .Used as:<br>
-mailing list<br>
-discussion forum<br>
-long-form chat room<br>
<br>
and there are well known companies such as Google acquisitions that have been using Discourse until this moment.
<br>
</b>
<h1>Discoverer :</h1>
<b><br>
Meshal Almansour<br>
Twitter: mesh3l_911
<br>
</b>

文件快照

备注