A vulnerability classified as problematic was found in discourse-chat up to 0.8. This impacts an unknown function of the component Channel Handler. The manipulation of the argument name/description results in cross site scripting.
This vulnerability is reported as CVE-2022-39279. The attack can be launched remotely. No exploit exists.
Upgrading the affected component is advised.
Intelligence View
⚡ tsecurity.de Intelligence
CVE-2022-39279 | discourse-chat up to 0.8 Channel name/description cross site scripting (GHSA-qp62-8m3c-9jgj / EUVD-2022-41783)
A vulnerability classified as problematic was found in discourse-chat up to 0.8. This impacts an unknown function of the component Channel Handler. The manipulation of the argument name/description results in cross site scripting. This…
Reagiere als Erste:r — dein Feedback zählt!
SOCIAL SHARE CARD GENERATOR