Discourse Reactions
Approved changes feed: RSS · Atom
cpe:2.3:a:discourse:discourse_reactions:*:*:*:*:*:discourse:*:*
part: a version: * update: *
| Vendor | Discourse (2d3c125b-857a-5933-b846-ed7f9d5e0225) |
|---|---|
| Product | Discourse Reactions (e4fd30e9-e6a6-5c63-9c09-61cee11d7016) |
| Edition | * |
| Language | * |
| Software edition | * |
| Target software | discourse |
| Target hardware | * |
| Other | * |
| Notes | Imported from gcve-enriched-dumps CVE data |
PURL mappings
| PURL | Source | Last updated |
|---|---|---|
| No PURL mappings for this CPE yet. | ||
Vulnerability references
| Identifier | cpeApplicability | Submitted | db.gcve.eu details | Rationale |
|---|---|---|---|---|
CVE:CVE-2023-49098 |
vulnerable | 2026-06-03 14:53:20.152373 |
Reaction data for user notifications exposed in Discourse-reactions
LOW (3.5)
Discourse-reactions is a plugin that allows user to add their reactions to the post. Data about a user's reaction notifications could be exposed. This vulnerability was patched in commit 2c26939.
Published: 2024-01-12T20:37:26.516Z
Updated: 2025-06-03T14:04:02.387Z |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2021-41140 |
vulnerable | 2026-06-03 14:45:25.209251 |
Reactions leak for secure category topics and private messages
MEDIUM (5.3)
Discourse-reactions is a plugin for the Discourse platform that allows user to add their reactions to the post. In affected versions reactions given by user to secure topics and private messages are visible. This issue is patched in version 0.2 of discourse-reaction. Users who are unable to update are advised to disable the Discourse-reactions plugin in admin panel.
Published: 2021-10-19T18:05:11.000Z
Updated: 2024-08-04T02:59:31.697Z |
Imported from gcve-enriched-dumps CVE data |
Contribute
You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.