{"id":"BIT-discourse-2023-37467","details":"Discourse is an open source discussion platform. Prior to version 3.1.0.beta7 of the `beta` and `tests-passed` branches, a CSP (Content Security Policy) nonce reuse vulnerability was discovered could allow cross-site scripting (XSS) attacks to bypass CSP protection for anonymous (i.e. unauthenticated) users. There are no known XSS vectors at the moment, but should one be discovered, this vulnerability would allow the XSS attack to bypass CSP and execute successfully. This vulnerability isn't applicable to logged-in users. Version 3.1.0.beta7 contains a patch. The stable branch doesn't have this vulnerability. A workaround to prevent the vulnerability is to disable Google Tag Manager, i.e., unset the `gtm container id` setting.","aliases":["CVE-2023-37467","GHSA-gr5h-hm62-jr3j"],"modified":"2025-10-15T02:42:35.000061Z","published":"2024-03-06T10:56:03.474Z","database_specific":{"cpes":["cpe:2.3:a:discourse:discourse:1.1.0:beta1:*:*:beta:*:*:*","cpe:2.3:a:discourse:discourse:1.1.0:beta2:*:*:beta:*:*:*","cpe:2.3:a:discourse:discourse:1.1.0:beta3:*:*:beta:*:*:*","cpe:2.3:a:discourse:discourse:1.1.0:beta4:*:*:beta:*:*:*","cpe:2.3:a:discourse:discourse:1.1.0:beta5:*:*:beta:*:*:*","cpe:2.3:a:discourse:discourse:1.1.0:beta6:*:*:beta:*:*:*","cpe:2.3:a:discourse:discourse:1.1.0:beta6b:*:*:beta:*:*:*","cpe:2.3:a:discourse:discourse:1.1.0:beta7:*:*:beta:*:*:*","cpe:2.3:a:discourse:discourse:1.1.0:beta8:*:*:beta:*:*:*","cpe:2.3:a:discourse:discourse:1.2.0:beta1:*:*:beta:*:*:*","cpe:2.3:a:discourse:discourse:1.2.0:beta2:*:*:beta:*:*:*","cpe:2.3:a:discourse:discourse:1.2.0:beta3:*:*:beta:*:*:*","cpe:2.3:a:discourse:discourse:1.2.0:beta4:*:*:beta:*:*:*","cpe:2.3:a:discourse:discourse:1.2.0:beta5:*:*:beta:*:*:*","cpe:2.3:a:discourse:discourse:1.2.0:beta6:*:*:beta:*:*:*","cpe:2.3:a:discourse:discourse:1.2.0:beta7:*:*:beta:*:*:*","cpe:2.3:a:discourse:discourse:1.2.0:beta8:*:*:beta:*:*:*","cpe:2.3:a:discourse:discourse:1.2.0:beta9:*:*:beta:*:*:*","cpe:2.3:a:discourse:discourse:1.3.0:beta10:*:*:beta:*:*:*","cpe:2.3:a:discourse:discourse:1.3.0:beta11:*:*:beta:*:*:*","cpe:2.3:a:discourse:discourse:1.3.0:beta1:*:*:beta:*:*:*","cpe:2.3:a:discourse:discourse:1.3.0:beta2:*:*:beta:*:*:*","cpe:2.3:a:discourse:discourse:1.3.0:beta3:*:*:beta:*:*:*","cpe:2.3:a:discourse:discourse:1.3.0:beta4:*:*:beta:*:*:*","cpe:2.3:a:discourse:discourse:1.3.0:beta5:*:*:beta:*:*:*","cpe:2.3:a:discourse:discourse:1.3.0:beta6:*:*:beta:*:*:*","cpe:2.3:a:discourse:discourse:1.3.0:beta7:*:*:beta:*:*:*","cpe:2.3:a:discourse:discourse:1.3.0:beta8:*:*:beta:*:*:*","cpe:2.3:a:discourse:discourse:1.3.0:beta9:*:*:beta:*:*:*","cpe:2.3:a:discourse:discourse:1.4.0:beta10:*:*:beta:*:*:*","cpe:2.3:a:discourse:discourse:1.4.0:beta11:*:*:beta:*:*:*","cpe:2.3:a:discourse:discourse:1.4.0:beta12:*:*:beta:*:*:*","cpe:2.3:a:discourse:discourse:1.4.0:beta1:*:*:beta:*:*:*","cpe:2.3:a:discourse:discourse:1.4.0:beta2:*:*:beta:*:*:*","cpe:2.3:a:discourse:discourse:1.4.0:beta3:*:*:beta:*:*:*","cpe:2.3:a:discourse:discourse:1.4.0:beta4:*:*:beta:*:*:*","cpe:2.3:a:discourse:discourse:1.4.0:beta5:*:*:beta:*:*:*","cpe:2.3:a:discourse:discourse:1.4.0:beta6:*:*:beta:*:*:*","cpe:2.3:a:discourse:discourse:1.4.0:beta7:*:*:beta:*:*:*","cpe:2.3:a:discourse:discourse:1.4.0:beta8:*:*:beta:*:*:*","cpe:2.3:a:discourse:discourse:1.4.0:beta9:*:*:beta:*:*:*","cpe:2.3:a:discourse:discourse:1.5.0:beta10:*:*:beta:*:*:*","cpe:2.3:a:discourse:discourse:1.5.0:beta11:*:*:beta:*:*:*","cpe:2.3:a:discourse:discourse:1.5.0:beta12:*:*:beta:*:*:*","cpe:2.3:a:discourse:discourse:1.5.0:beta13:*:*:beta:*:*:*","cpe:2.3:a:discourse:discourse:1.5.0:beta13b:*:*:beta:*:*:*","cpe:2.3:a:discourse:discourse:1.5.0:beta14:*:*:beta:*:*:*","cpe:2.3:a:discourse:discourse:1.5.0:beta1:*:*:beta:*:*:*","cpe:2.3:a:discourse:discourse:1.5.0:beta2:*:*:beta:*:*:*","cpe:2.3:a:discourse:discourse:1.5.0:beta3:*:*:beta:*:*:*","cpe:2.3:a:discourse:discourse:1.5.0:beta4:*:*:beta:*:*:*","cpe:2.3:a:discourse:discourse:1.5.0:beta5:*:*:beta:*:*:*","cpe:2.3:a:discourse:discourse:1.5.0:beta6:*:*:beta:*:*:*","cpe:2.3:a:discourse:discourse:1.5.0:beta7:*:*:beta:*:*:*","cpe:2.3:a:discourse:discourse:1.5.0:beta8:*:*:beta:*:*:*","cpe:2.3:a:discourse:discourse:1.5.0:beta9:*:*:beta:*:*:*","cpe:2.3:a:discourse:discourse:1.6.0:beta10:*:*:beta:*:*:*","cpe:2.3:a:discourse:discourse:1.6.0:beta11:*:*:beta:*:*:*","cpe:2.3:a:discourse:discourse:1.6.0:beta12:*:*:beta:*:*:*","cpe:2.3:a:discourse:discourse:1.6.0:beta1:*:*:beta:*:*:*","cpe:2.3:a:discourse:discourse:1.6.0:beta2:*:*:beta:*:*:*","cpe:2.3:a:discourse:discourse:1.6.0:beta3:*:*:beta:*:*:*","cpe:2.3:a:discourse:discourse:1.6.0:beta4:*:*:beta:*:*:*","cpe:2.3:a:discourse:discourse:1.6.0:beta5:*:*:beta:*:*:*","cpe:2.3:a:discourse:discourse:1.6.0:beta6:*:*:beta:*:*:*","cpe:2.3:a:discourse:discourse:1.6.0:beta7:*:*:beta:*:*:*","cpe:2.3:a:discourse:discourse:1.6.0:beta8:*:*:beta:*:*:*","cpe:2.3:a:discourse:discourse:1.6.0:beta9:*:*:beta:*:*:*","cpe:2.3:a:discourse:discourse:1.7.0:beta10:*:*:beta:*:*:*","cpe:2.3:a:discourse:discourse:1.7.0:beta11:*:*:beta:*:*:*","cpe:2.3:a:discourse:discourse:1.7.0:beta1:*:*:beta:*:*:*","cpe:2.3:a:discourse:discourse:1.7.0:beta2:*:*:beta:*:*:*","cpe:2.3:a:discourse:discourse:1.7.0:beta3:*:*:beta:*:*:*","cpe:2.3:a:discourse:discourse:1.7.0:beta4:*:*:beta:*:*:*","cpe:2.3:a:discourse:discourse:1.7.0:beta5:*:*:beta:*:*:*","cpe:2.3:a:discourse:discourse:1.7.0:beta6:*:*:beta:*:*:*","cpe:2.3:a:discourse:discourse:1.7.0:beta7:*:*:beta:*:*:*","cpe:2.3:a:discourse:discourse:1.7.0:beta8:*:*:beta:*:*:*","cpe:2.3:a:discourse:discourse:1.7.0:beta9:*:*:beta:*:*:*","cpe:2.3:a:discourse:discourse:1.8.0:beta10:*:*:beta:*:*:*","cpe:2.3:a:discourse:discourse:1.8.0:beta11:*:*:beta:*:*:*","cpe:2.3:a:discourse:discourse:1.8.0:beta12:*:*:beta:*:*:*","cpe:2.3:a:discourse:discourse:1.8.0:beta13:*:*:beta:*:*:*","cpe:2.3:a:discourse:discourse:1.8.0:beta1:*:*:beta:*:*:*","cpe:2.3:a:discourse:discourse:1.8.0:beta2:*:*:beta:*:*:*","cpe:2.3:a:discourse:discourse:1.8.0:beta3:*:*:beta:*:*:*","cpe:2.3:a:discourse:discourse:1.8.0:beta4:*:*:beta:*:*:*","cpe:2.3:a:discourse:discourse:1.8.0:beta5:*:*:beta:*:*:*","cpe:2.3:a:discourse:discourse:1.8.0:beta6:*:*:beta:*:*:*","cpe:2.3:a:discourse:discourse:1.8.0:beta7:*:*:beta:*:*:*","cpe:2.3:a:discourse:discourse:1.8.0:beta8:*:*:beta:*:*:*","cpe:2.3:a:discourse:discourse:1.8.0:beta9:*:*:beta:*:*:*","cpe:2.3:a:discourse:discourse:1.9.0:beta10:*:*:beta:*:*:*","cpe:2.3:a:discourse:discourse:1.9.0:beta11:*:*:beta:*:*:*","cpe:2.3:a:discourse:discourse:1.9.0:beta12:*:*:beta:*:*:*","cpe:2.3:a:discourse:discourse:1.9.0:beta13:*:*:beta:*:*:*","cpe:2.3:a:discourse:discourse:1.9.0:beta14:*:*:beta:*:*:*","cpe:2.3:a:discourse:discourse:1.9.0:beta15:*:*:beta:*:*:*","cpe:2.3:a:discourse:discourse:1.9.0:beta16:*:*:beta:*:*:*","cpe:2.3:a:discourse:discourse:1.9.0:beta17:*:*:beta:*:*:*","cpe:2.3:a:discourse:discourse:1.9.0:beta1:*:*:beta:*:*:*","cpe:2.3:a:discourse:discourse:1.9.0:beta2:*:*:beta:*:*:*","cpe:2.3:a:discourse:discourse:1.9.0:beta3:*:*:beta:*:*:*","cpe:2.3:a:discourse:discourse:1.9.0:beta4:*:*:beta:*:*:*","cpe:2.3:a:discourse:discourse:1.9.0:beta5:*:*:beta:*:*:*","cpe:2.3:a:discourse:discourse:1.9.0:beta6:*:*:beta:*:*:*","cpe:2.3:a:discourse:discourse:1.9.0:beta7:*:*:beta:*:*:*","cpe:2.3:a:discourse:discourse:1.9.0:beta8:*:*:beta:*:*:*","cpe:2.3:a:discourse:discourse:1.9.0:beta9:*:*:beta:*:*:*","cpe:2.3:a:discourse:discourse:2.0.0:beta10:*:*:beta:*:*:*","cpe:2.3:a:discourse:discourse:2.0.0:beta1:*:*:beta:*:*:*","cpe:2.3:a:discourse:discourse:2.0.0:beta2:*:*:beta:*:*:*","cpe:2.3:a:discourse:discourse:2.0.0:beta3:*:*:beta:*:*:*","cpe:2.3:a:discourse:discourse:2.0.0:beta4:*:*:beta:*:*:*","cpe:2.3:a:discourse:discourse:2.0.0:beta5:*:*:beta:*:*:*","cpe:2.3:a:discourse:discourse:2.0.0:beta6:*:*:beta:*:*:*","cpe:2.3:a:discourse:discourse:2.0.0:beta7:*:*:beta:*:*:*","cpe:2.3:a:discourse:discourse:2.0.0:beta8:*:*:beta:*:*:*","cpe:2.3:a:discourse:discourse:2.0.0:beta9:*:*:beta:*:*:*","cpe:2.3:a:discourse:discourse:2.1.0:beta1:*:*:beta:*:*:*","cpe:2.3:a:discourse:discourse:2.1.0:beta2:*:*:beta:*:*:*","cpe:2.3:a:discourse:discourse:2.1.0:beta3:*:*:beta:*:*:*","cpe:2.3:a:discourse:discourse:2.1.0:beta4:*:*:beta:*:*:*","cpe:2.3:a:discourse:discourse:2.1.0:beta5:*:*:beta:*:*:*","cpe:2.3:a:discourse:discourse:2.1.0:beta6:*:*:beta:*:*:*","cpe:2.3:a:discourse:discourse:2.2.0:beta10:*:*:beta:*:*:*","cpe:2.3:a:discourse:discourse:2.2.0:beta1:*:*:beta:*:*:*","cpe:2.3:a:discourse:discourse:2.2.0:beta2:*:*:beta:*:*:*","cpe:2.3:a:discourse:discourse:2.2.0:beta3:*:*:beta:*:*:*","cpe:2.3:a:discourse:discourse:2.2.0:beta4:*:*:beta:*:*:*","cpe:2.3:a:discourse:discourse:2.2.0:beta5:*:*:beta:*:*:*","cpe:2.3:a:discourse:discourse:2.2.0:beta6:*:*:beta:*:*:*","cpe:2.3:a:discourse:discourse:2.2.0:beta7:*:*:beta:*:*:*","cpe:2.3:a:discourse:discourse:2.2.0:beta8:*:*:beta:*:*:*","cpe:2.3:a:discourse:discourse:2.2.0:beta9:*:*:beta:*:*:*","cpe:2.3:a:discourse:discourse:2.3.0:beta10:*:*:beta:*:*:*","cpe:2.3:a:discourse:discourse:2.3.0:beta11:*:*:beta:*:*:*","cpe:2.3:a:discourse:discourse:2.3.0:beta1:*:*:beta:*:*:*","cpe:2.3:a:discourse:discourse:2.3.0:beta2:*:*:beta:*:*:*","cpe:2.3:a:discourse:discourse:2.3.0:beta3:*:*:beta:*:*:*","cpe:2.3:a:discourse:discourse:2.3.0:beta4:*:*:beta:*:*:*","cpe:2.3:a:discourse:discourse:2.3.0:beta5:*:*:beta:*:*:*","cpe:2.3:a:discourse:discourse:2.3.0:beta6:*:*:beta:*:*:*","cpe:2.3:a:discourse:discourse:2.3.0:beta7:*:*:beta:*:*:*","cpe:2.3:a:discourse:discourse:2.3.0:beta8:*:*:beta:*:*:*","cpe:2.3:a:discourse:discourse:2.3.0:beta9:*:*:beta:*:*:*","cpe:2.3:a:discourse:discourse:2.4.0:beta10:*:*:beta:*:*:*","cpe:2.3:a:discourse:discourse:2.4.0:beta11:*:*:beta:*:*:*","cpe:2.3:a:discourse:discourse:2.4.0:beta1:*:*:beta:*:*:*","cpe:2.3:a:discourse:discourse:2.4.0:beta2:*:*:beta:*:*:*","cpe:2.3:a:discourse:discourse:2.4.0:beta3:*:*:beta:*:*:*","cpe:2.3:a:discourse:discourse:2.4.0:beta4:*:*:beta:*:*:*","cpe:2.3:a:discourse:discourse:2.4.0:beta5:*:*:beta:*:*:*","cpe:2.3:a:discourse:discourse:2.4.0:beta6:*:*:beta:*:*:*","cpe:2.3:a:discourse:discourse:2.4.0:beta7:*:*:beta:*:*:*","cpe:2.3:a:discourse:discourse:2.4.0:beta8:*:*:beta:*:*:*","cpe:2.3:a:discourse:discourse:2.4.0:beta9:*:*:beta:*:*:*","cpe:2.3:a:discourse:discourse:2.5.0:beta1:*:*:beta:*:*:*","cpe:2.3:a:discourse:discourse:2.5.0:beta2:*:*:beta:*:*:*","cpe:2.3:a:discourse:discourse:2.5.0:beta3:*:*:beta:*:*:*","cpe:2.3:a:discourse:discourse:2.5.0:beta4:*:*:beta:*:*:*","cpe:2.3:a:discourse:discourse:2.5.0:beta5:*:*:beta:*:*:*","cpe:2.3:a:discourse:discourse:2.5.0:beta6:*:*:beta:*:*:*","cpe:2.3:a:discourse:discourse:2.5.0:beta7:*:*:beta:*:*:*","cpe:2.3:a:discourse:discourse:2.6.0:beta1:*:*:beta:*:*:*","cpe:2.3:a:discourse:discourse:2.6.0:beta2:*:*:beta:*:*:*","cpe:2.3:a:discourse:discourse:2.6.0:beta3:*:*:beta:*:*:*","cpe:2.3:a:discourse:discourse:2.6.0:beta4:*:*:beta:*:*:*","cpe:2.3:a:discourse:discourse:2.6.0:beta5:*:*:beta:*:*:*","cpe:2.3:a:discourse:discourse:2.6.0:beta6:*:*:beta:*:*:*","cpe:2.3:a:discourse:discourse:2.7.0:beta1:*:*:beta:*:*:*","cpe:2.3:a:discourse:discourse:2.7.0:beta2:*:*:beta:*:*:*","cpe:2.3:a:discourse:discourse:2.7.0:beta3:*:*:beta:*:*:*","cpe:2.3:a:discourse:discourse:2.7.0:beta4:*:*:beta:*:*:*","cpe:2.3:a:discourse:discourse:2.7.0:beta5:*:*:beta:*:*:*","cpe:2.3:a:discourse:discourse:2.7.0:beta6:*:*:beta:*:*:*","cpe:2.3:a:discourse:discourse:2.7.0:beta7:*:*:beta:*:*:*","cpe:2.3:a:discourse:discourse:2.7.0:beta8:*:*:beta:*:*:*","cpe:2.3:a:discourse:discourse:2.7.0:beta9:*:*:beta:*:*:*","cpe:2.3:a:discourse:discourse:2.8.0:beta10:*:*:beta:*:*:*","cpe:2.3:a:discourse:discourse:2.8.0:beta11:*:*:beta:*:*:*","cpe:2.3:a:discourse:discourse:2.8.0:beta1:*:*:beta:*:*:*","cpe:2.3:a:discourse:discourse:2.8.0:beta2:*:*:beta:*:*:*","cpe:2.3:a:discourse:discourse:2.8.0:beta3:*:*:beta:*:*:*","cpe:2.3:a:discourse:discourse:2.8.0:beta4:*:*:beta:*:*:*","cpe:2.3:a:discourse:discourse:2.8.0:beta5:*:*:beta:*:*:*","cpe:2.3:a:discourse:discourse:2.8.0:beta6:*:*:beta:*:*:*","cpe:2.3:a:discourse:discourse:2.8.0:beta7:*:*:beta:*:*:*","cpe:2.3:a:discourse:discourse:2.8.0:beta8:*:*:beta:*:*:*","cpe:2.3:a:discourse:discourse:2.8.0:beta9:*:*:beta:*:*:*","cpe:2.3:a:discourse:discourse:2.9.0:beta10:*:*:beta:*:*:*","cpe:2.3:a:discourse:discourse:2.9.0:beta11:*:*:beta:*:*:*","cpe:2.3:a:discourse:discourse:2.9.0:beta12:*:*:beta:*:*:*","cpe:2.3:a:discourse:discourse:2.9.0:beta13:*:*:beta:*:*:*","cpe:2.3:a:discourse:discourse:2.9.0:beta14:*:*:beta:*:*:*","cpe:2.3:a:discourse:discourse:2.9.0:beta1:*:*:beta:*:*:*","cpe:2.3:a:discourse:discourse:2.9.0:beta2:*:*:beta:*:*:*","cpe:2.3:a:discourse:discourse:2.9.0:beta3:*:*:beta:*:*:*","cpe:2.3:a:discourse:discourse:2.9.0:beta4:*:*:beta:*:*:*","cpe:2.3:a:discourse:discourse:2.9.0:beta5:*:*:beta:*:*:*","cpe:2.3:a:discourse:discourse:2.9.0:beta6:*:*:beta:*:*:*","cpe:2.3:a:discourse:discourse:2.9.0:beta7:*:*:beta:*:*:*","cpe:2.3:a:discourse:discourse:2.9.0:beta8:*:*:beta:*:*:*","cpe:2.3:a:discourse:discourse:2.9.0:beta9:*:*:beta:*:*:*","cpe:2.3:a:discourse:discourse:3.0.0:beta15:*:*:beta:*:*:*","cpe:2.3:a:discourse:discourse:3.0.0:beta16:*:*:beta:*:*:*","cpe:2.3:a:discourse:discourse:3.1.0:beta1:*:*:beta:*:*:*","cpe:2.3:a:discourse:discourse:3.1.0:beta2:*:*:beta:*:*:*","cpe:2.3:a:discourse:discourse:3.1.0:beta3:*:*:beta:*:*:*","cpe:2.3:a:discourse:discourse:3.1.0:beta5:*:*:beta:*:*:*","cpe:2.3:a:discourse:discourse:3.1.0:beta6:*:*:beta:*:*:*"],"severity":"Medium"},"references":[{"type":"WEB","url":"https://github.com/discourse/discourse/commit/0976c8fad6970b6182e7837bf87de07709407f25"},{"type":"WEB","url":"https://github.com/discourse/discourse/security/advisories/GHSA-gr5h-hm62-jr3j"}],"affected":[{"package":{"name":"discourse","ecosystem":"Bitnami","purl":"pkg:bitnami/discourse"},"ranges":[{"type":"SEMVER","events":[{"introduced":"1.1.0-beta1"},{"last_affected":"1.1.0-beta1"},{"introduced":"1.1.0-beta2"},{"last_affected":"1.1.0-beta2"},{"introduced":"1.1.0-beta3"},{"last_affected":"1.1.0-beta3"},{"introduced":"1.1.0-beta4"},{"last_affected":"1.1.0-beta4"},{"introduced":"1.1.0-beta5"},{"last_affected":"1.1.0-beta5"},{"introduced":"1.1.0-beta6"},{"last_affected":"1.1.0-beta6"},{"introduced":"1.1.0-beta6b"},{"last_affected":"1.1.0-beta6b"},{"introduced":"1.1.0-beta7"},{"last_affected":"1.1.0-beta7"},{"introduced":"1.1.0-beta8"},{"last_affected":"1.1.0-beta8"},{"introduced":"1.2.0-beta1"},{"last_affected":"1.2.0-beta1"},{"introduced":"1.2.0-beta2"},{"last_affected":"1.2.0-beta2"},{"introduced":"1.2.0-beta3"},{"last_affected":"1.2.0-beta3"},{"introduced":"1.2.0-beta4"},{"last_affected":"1.2.0-beta4"},{"introduced":"1.2.0-beta5"},{"last_affected":"1.2.0-beta5"},{"introduced":"1.2.0-beta6"},{"last_affected":"1.2.0-beta6"},{"introduced":"1.2.0-beta7"},{"last_affected":"1.2.0-beta7"},{"introduced":"1.2.0-beta8"},{"last_affected":"1.2.0-beta8"},{"introduced":"1.2.0-beta9"},{"last_affected":"1.2.0-beta9"},{"introduced":"1.3.0-beta1"},{"last_affected":"1.3.0-beta1"},{"introduced":"1.3.0-beta10"},{"last_affected":"1.3.0-beta10"},{"introduced":"1.3.0-beta11"},{"last_affected":"1.3.0-beta11"},{"introduced":"1.3.0-beta2"},{"last_affected":"1.3.0-beta2"},{"introduced":"1.3.0-beta3"},{"last_affected":"1.3.0-beta3"},{"introduced":"1.3.0-beta4"},{"last_affected":"1.3.0-beta4"},{"introduced":"1.3.0-beta5"},{"last_affected":"1.3.0-beta5"},{"introduced":"1.3.0-beta6"},{"last_affected":"1.3.0-beta6"},{"introduced":"1.3.0-beta7"},{"last_affected":"1.3.0-beta7"},{"introduced":"1.3.0-beta8"},{"last_affected":"1.3.0-beta8"},{"introduced":"1.3.0-beta9"},{"last_affected":"1.3.0-beta9"},{"introduced":"1.4.0-beta1"},{"last_affected":"1.4.0-beta1"},{"introduced":"1.4.0-beta10"},{"last_affected":"1.4.0-beta10"},{"introduced":"1.4.0-beta11"},{"last_affected":"1.4.0-beta11"},{"introduced":"1.4.0-beta12"},{"last_affected":"1.4.0-beta12"},{"introduced":"1.4.0-beta2"},{"last_affected":"1.4.0-beta2"},{"introduced":"1.4.0-beta3"},{"last_affected":"1.4.0-beta3"},{"introduced":"1.4.0-beta4"},{"last_affected":"1.4.0-beta4"},{"introduced":"1.4.0-beta5"},{"last_affected":"1.4.0-beta5"},{"introduced":"1.4.0-beta6"},{"last_affected":"1.4.0-beta6"},{"introduced":"1.4.0-beta7"},{"last_affected":"1.4.0-beta7"},{"introduced":"1.4.0-beta8"},{"last_affected":"1.4.0-beta8"},{"introduced":"1.4.0-beta9"},{"last_affected":"1.4.0-beta9"},{"introduced":"1.5.0-beta1"},{"last_affected":"1.5.0-beta1"},{"introduced":"1.5.0-beta10"},{"last_affected":"1.5.0-beta10"},{"introduced":"1.5.0-beta11"},{"last_affected":"1.5.0-beta11"},{"introduced":"1.5.0-beta12"},{"last_affected":"1.5.0-beta12"},{"introduced":"1.5.0-beta13"},{"last_affected":"1.5.0-beta13"},{"introduced":"1.5.0-beta13b"},{"last_affected":"1.5.0-beta13b"},{"introduced":"1.5.0-beta14"},{"last_affected":"1.5.0-beta14"},{"introduced":"1.5.0-beta2"},{"last_affected":"1.5.0-beta2"},{"introduced":"1.5.0-beta3"},{"last_affected":"1.5.0-beta3"},{"introduced":"1.5.0-beta4"},{"last_affected":"1.5.0-beta4"},{"introduced":"1.5.0-beta5"},{"last_affected":"1.5.0-beta5"},{"introduced":"1.5.0-beta6"},{"last_affected":"1.5.0-beta6"},{"introduced":"1.5.0-beta7"},{"last_affected":"1.5.0-beta7"},{"introduced":"1.5.0-beta8"},{"last_affected":"1.5.0-beta8"},{"introduced":"1.5.0-beta9"},{"last_affected":"1.5.0-beta9"},{"introduced":"1.6.0-beta1"},{"last_affected":"1.6.0-beta1"},{"introduced":"1.6.0-beta10"},{"last_affected":"1.6.0-beta10"},{"introduced":"1.6.0-beta11"},{"last_affected":"1.6.0-beta11"},{"introduced":"1.6.0-beta12"},{"last_affected":"1.6.0-beta12"},{"introduced":"1.6.0-beta2"},{"last_affected":"1.6.0-beta2"},{"introduced":"1.6.0-beta3"},{"last_affected":"1.6.0-beta3"},{"introduced":"1.6.0-beta4"},{"last_affected":"1.6.0-beta4"},{"introduced":"1.6.0-beta5"},{"last_affected":"1.6.0-beta5"},{"introduced":"1.6.0-beta6"},{"last_affected":"1.6.0-beta6"},{"introduced":"1.6.0-beta7"},{"last_affected":"1.6.0-beta7"},{"introduced":"1.6.0-beta8"},{"last_affected":"1.6.0-beta8"},{"introduced":"1.6.0-beta9"},{"last_affected":"1.6.0-beta9"},{"introduced":"1.7.0-beta1"},{"last_affected":"1.7.0-beta1"},{"introduced":"1.7.0-beta10"},{"last_affected":"1.7.0-beta10"},{"introduced":"1.7.0-beta11"},{"last_affected":"1.7.0-beta11"},{"introduced":"1.7.0-beta2"},{"last_affected":"1.7.0-beta2"},{"introduced":"1.7.0-beta3"},{"last_affected":"1.7.0-beta3"},{"introduced":"1.7.0-beta4"},{"last_affected":"1.7.0-beta4"},{"introduced":"1.7.0-beta5"},{"last_affected":"1.7.0-beta5"},{"introduced":"1.7.0-beta6"},{"last_affected":"1.7.0-beta6"},{"introduced":"1.7.0-beta7"},{"last_affected":"1.7.0-beta7"},{"introduced":"1.7.0-beta8"},{"last_affected":"1.7.0-beta8"},{"introduced":"1.7.0-beta9"},{"last_affected":"1.7.0-beta9"},{"introduced":"1.8.0-beta1"},{"last_affected":"1.8.0-beta1"},{"introduced":"1.8.0-beta10"},{"last_affected":"1.8.0-beta10"},{"introduced":"1.8.0-beta11"},{"last_affected":"1.8.0-beta11"},{"introduced":"1.8.0-beta12"},{"last_affected":"1.8.0-beta12"},{"introduced":"1.8.0-beta13"},{"last_affected":"1.8.0-beta13"},{"introduced":"1.8.0-beta2"},{"last_affected":"1.8.0-beta2"},{"introduced":"1.8.0-beta3"},{"last_affected":"1.8.0-beta3"},{"introduced":"1.8.0-beta4"},{"last_affected":"1.8.0-beta4"},{"introduced":"1.8.0-beta5"},{"last_affected":"1.8.0-beta5"},{"introduced":"1.8.0-beta6"},{"last_affected":"1.8.0-beta6"},{"introduced":"1.8.0-beta7"},{"last_affected":"1.8.0-beta7"},{"introduced":"1.8.0-beta8"},{"last_affected":"1.8.0-beta8"},{"introduced":"1.8.0-beta9"},{"last_affected":"1.8.0-beta9"},{"introduced":"1.9.0-beta1"},{"last_affected":"1.9.0-beta1"},{"introduced":"1.9.0-beta10"},{"last_affected":"1.9.0-beta10"},{"introduced":"1.9.0-beta11"},{"last_affected":"1.9.0-beta11"},{"introduced":"1.9.0-beta12"},{"last_affected":"1.9.0-beta12"},{"introduced":"1.9.0-beta13"},{"last_affected":"1.9.0-beta13"},{"introduced":"1.9.0-beta14"},{"last_affected":"1.9.0-beta14"},{"introduced":"1.9.0-beta15"},{"last_affected":"1.9.0-beta15"},{"introduced":"1.9.0-beta16"},{"last_affected":"1.9.0-beta16"},{"introduced":"1.9.0-beta17"},{"last_affected":"1.9.0-beta17"},{"introduced":"1.9.0-beta2"},{"last_affected":"1.9.0-beta2"},{"introduced":"1.9.0-beta3"},{"last_affected":"1.9.0-beta3"},{"introduced":"1.9.0-beta4"},{"last_affected":"1.9.0-beta4"},{"introduced":"1.9.0-beta5"},{"last_affected":"1.9.0-beta5"},{"introduced":"1.9.0-beta6"},{"last_affected":"1.9.0-beta6"},{"introduced":"1.9.0-beta7"},{"last_affected":"1.9.0-beta7"},{"introduced":"1.9.0-beta8"},{"last_affected":"1.9.0-beta8"},{"introduced":"1.9.0-beta9"},{"last_affected":"1.9.0-beta9"},{"introduced":"2.0.0-beta1"},{"last_affected":"2.0.0-beta1"},{"introduced":"2.0.0-beta10"},{"last_affected":"2.0.0-beta10"},{"introduced":"2.0.0-beta2"},{"last_affected":"2.0.0-beta2"},{"introduced":"2.0.0-beta3"},{"last_affected":"2.0.0-beta3"},{"introduced":"2.0.0-beta4"},{"last_affected":"2.0.0-beta4"},{"introduced":"2.0.0-beta5"},{"last_affected":"2.0.0-beta5"},{"introduced":"2.0.0-beta6"},{"last_affected":"2.0.0-beta6"},{"introduced":"2.0.0-beta7"},{"last_affected":"2.0.0-beta7"},{"introduced":"2.0.0-beta8"},{"last_affected":"2.0.0-beta8"},{"introduced":"2.0.0-beta9"},{"last_affected":"2.0.0-beta9"},{"introduced":"2.1.0-beta1"},{"last_affected":"2.1.0-beta1"},{"introduced":"2.1.0-beta2"},{"last_affected":"2.1.0-beta2"},{"introduced":"2.1.0-beta3"},{"last_affected":"2.1.0-beta3"},{"introduced":"2.1.0-beta4"},{"last_affected":"2.1.0-beta4"},{"introduced":"2.1.0-beta5"},{"last_affected":"2.1.0-beta5"},{"introduced":"2.1.0-beta6"},{"last_affected":"2.1.0-beta6"},{"introduced":"2.2.0-beta1"},{"last_affected":"2.2.0-beta1"},{"introduced":"2.2.0-beta10"},{"last_affected":"2.2.0-beta10"},{"introduced":"2.2.0-beta2"},{"last_affected":"2.2.0-beta2"},{"introduced":"2.2.0-beta3"},{"last_affected":"2.2.0-beta3"},{"introduced":"2.2.0-beta4"},{"last_affected":"2.2.0-beta4"},{"introduced":"2.2.0-beta5"},{"last_affected":"2.2.0-beta5"},{"introduced":"2.2.0-beta6"},{"last_affected":"2.2.0-beta6"},{"introduced":"2.2.0-beta7"},{"last_affected":"2.2.0-beta7"},{"introduced":"2.2.0-beta8"},{"last_affected":"2.2.0-beta8"},{"introduced":"2.2.0-beta9"},{"last_affected":"2.2.0-beta9"},{"introduced":"2.3.0-beta1"},{"last_affected":"2.3.0-beta1"},{"introduced":"2.3.0-beta10"},{"last_affected":"2.3.0-beta10"},{"introduced":"2.3.0-beta11"},{"last_affected":"2.3.0-beta11"},{"introduced":"2.3.0-beta2"},{"last_affected":"2.3.0-beta2"},{"introduced":"2.3.0-beta3"},{"last_affected":"2.3.0-beta3"},{"introduced":"2.3.0-beta4"},{"last_affected":"2.3.0-beta4"},{"introduced":"2.3.0-beta5"},{"last_affected":"2.3.0-beta5"},{"introduced":"2.3.0-beta6"},{"last_affected":"2.3.0-beta6"},{"introduced":"2.3.0-beta7"},{"last_affected":"2.3.0-beta7"},{"introduced":"2.3.0-beta8"},{"last_affected":"2.3.0-beta8"},{"introduced":"2.3.0-beta9"},{"last_affected":"2.3.0-beta9"},{"introduced":"2.4.0-beta1"},{"last_affected":"2.4.0-beta1"},{"introduced":"2.4.0-beta10"},{"last_affected":"2.4.0-beta10"},{"introduced":"2.4.0-beta11"},{"last_affected":"2.4.0-beta11"},{"introduced":"2.4.0-beta2"},{"last_affected":"2.4.0-beta2"},{"introduced":"2.4.0-beta3"},{"last_affected":"2.4.0-beta3"},{"introduced":"2.4.0-beta4"},{"last_affected":"2.4.0-beta4"},{"introduced":"2.4.0-beta5"},{"last_affected":"2.4.0-beta5"},{"introduced":"2.4.0-beta6"},{"last_affected":"2.4.0-beta6"},{"introduced":"2.4.0-beta7"},{"last_affected":"2.4.0-beta7"},{"introduced":"2.4.0-beta8"},{"last_affected":"2.4.0-beta8"},{"introduced":"2.4.0-beta9"},{"last_affected":"2.4.0-beta9"},{"introduced":"2.5.0-beta1"},{"last_affected":"2.5.0-beta1"},{"introduced":"2.5.0-beta2"},{"last_affected":"2.5.0-beta2"},{"introduced":"2.5.0-beta3"},{"last_affected":"2.5.0-beta3"},{"introduced":"2.5.0-beta4"},{"last_affected":"2.5.0-beta4"},{"introduced":"2.5.0-beta5"},{"last_affected":"2.5.0-beta5"},{"introduced":"2.5.0-beta6"},{"last_affected":"2.5.0-beta6"},{"introduced":"2.5.0-beta7"},{"last_affected":"2.5.0-beta7"},{"introduced":"2.6.0-beta1"},{"last_affected":"2.6.0-beta1"},{"introduced":"2.6.0-beta2"},{"last_affected":"2.6.0-beta2"},{"introduced":"2.6.0-beta3"},{"last_affected":"2.6.0-beta3"},{"introduced":"2.6.0-beta4"},{"last_affected":"2.6.0-beta4"},{"introduced":"2.6.0-beta5"},{"last_affected":"2.6.0-beta5"},{"introduced":"2.6.0-beta6"},{"last_affected":"2.6.0-beta6"},{"introduced":"2.7.0-beta1"},{"last_affected":"2.7.0-beta1"},{"introduced":"2.7.0-beta2"},{"last_affected":"2.7.0-beta2"},{"introduced":"2.7.0-beta3"},{"last_affected":"2.7.0-beta3"},{"introduced":"2.7.0-beta4"},{"last_affected":"2.7.0-beta4"},{"introduced":"2.7.0-beta5"},{"last_affected":"2.7.0-beta5"},{"introduced":"2.7.0-beta6"},{"last_affected":"2.7.0-beta6"},{"introduced":"2.7.0-beta7"},{"last_affected":"2.7.0-beta7"},{"introduced":"2.7.0-beta8"},{"last_affected":"2.7.0-beta8"},{"introduced":"2.7.0-beta9"},{"last_affected":"2.7.0-beta9"},{"introduced":"2.8.0-beta1"},{"last_affected":"2.8.0-beta1"},{"introduced":"2.8.0-beta10"},{"last_affected":"2.8.0-beta10"},{"introduced":"2.8.0-beta11"},{"last_affected":"2.8.0-beta11"},{"introduced":"2.8.0-beta2"},{"last_affected":"2.8.0-beta2"},{"introduced":"2.8.0-beta3"},{"last_affected":"2.8.0-beta3"},{"introduced":"2.8.0-beta4"},{"last_affected":"2.8.0-beta4"},{"introduced":"2.8.0-beta5"},{"last_affected":"2.8.0-beta5"},{"introduced":"2.8.0-beta6"},{"last_affected":"2.8.0-beta6"},{"introduced":"2.8.0-beta7"},{"last_affected":"2.8.0-beta7"},{"introduced":"2.8.0-beta8"},{"last_affected":"2.8.0-beta8"},{"introduced":"2.8.0-beta9"},{"last_affected":"2.8.0-beta9"},{"introduced":"2.9.0-beta1"},{"last_affected":"2.9.0-beta1"},{"introduced":"2.9.0-beta10"},{"last_affected":"2.9.0-beta10"},{"introduced":"2.9.0-beta11"},{"last_affected":"2.9.0-beta11"},{"introduced":"2.9.0-beta12"},{"last_affected":"2.9.0-beta12"},{"introduced":"2.9.0-beta13"},{"last_affected":"2.9.0-beta13"},{"introduced":"2.9.0-beta14"},{"last_affected":"2.9.0-beta14"},{"introduced":"2.9.0-beta2"},{"last_affected":"2.9.0-beta2"},{"introduced":"2.9.0-beta3"},{"last_affected":"2.9.0-beta3"},{"introduced":"2.9.0-beta4"},{"last_affected":"2.9.0-beta4"},{"introduced":"2.9.0-beta5"},{"last_affected":"2.9.0-beta5"},{"introduced":"2.9.0-beta6"},{"last_affected":"2.9.0-beta6"},{"introduced":"2.9.0-beta7"},{"last_affected":"2.9.0-beta7"},{"introduced":"2.9.0-beta8"},{"last_affected":"2.9.0-beta8"},{"introduced":"2.9.0-beta9"},{"last_affected":"2.9.0-beta9"},{"introduced":"3.0.0-beta15"},{"last_affected":"3.0.0-beta15"},{"introduced":"3.0.0-beta16"},{"last_affected":"3.0.0-beta16"},{"introduced":"3.1.0-beta1"},{"last_affected":"3.1.0-beta1"},{"introduced":"3.1.0-beta2"},{"last_affected":"3.1.0-beta2"},{"introduced":"3.1.0-beta3"},{"last_affected":"3.1.0-beta3"},{"introduced":"3.1.0-beta5"},{"last_affected":"3.1.0-beta5"},{"introduced":"3.1.0-beta6"},{"last_affected":"3.1.0-beta6"}]}],"database_specific":{"source":"https://github.com/bitnami/vulndb/tree/main/data/discourse/BIT-discourse-2023-37467.json"},"severity":[{"type":"CVSS_V3","score":"CVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:N"}]}],"schema_version":"1.7.3"}