Vulnerabilities > CVE-2024-24755 - Unspecified vulnerability in Discourse Group Membership IP Blocks

047910
CVSS 5.3 - MEDIUM
Attack vector
NETWORK
Attack complexity
LOW
Privileges required
NONE
Confidentiality impact
LOW
Integrity impact
NONE
Availability impact
NONE
network
low complexity
discourse
NVD
Published: 2024-02-01
Updated: 2024-11-21

Summary

discourse-group-membership-ip-block is a discourse plugin that adds support for adding users to groups based on their IP address. discourse-group-membership-ip-block was sending all group custom fields to the client, including group custom fields from other plugins which may expect their custom fields to remain secret.

Vulnerable Configurations

Part Description Count
Application
Discourse
1

References