{"resultsPerPage":1,"startIndex":0,"totalResults":1,"format":"NVD_CVE","version":"2.0","timestamp":"2026-09-29T16:39:26.626","vulnerabilities":[{"cve":{"id":"CVE-2022-21678","sourceIdentifier":"security-advisories@github.com","published":"2022-01-13T18:15:08.233","lastModified":"2026-06-17T04:26:44.707","vulnStatus":"Modified","cveTags":[],"descriptions":[{"lang":"en","value":"Discourse is an open source discussion platform. Prior to version 2.8.0.beta11 in the `tests-passed` branch, version 2.8.0.beta11 in the `beta` branch, and version 2.7.13 in the `stable` branch, the bios of users who made their profiles private were still visible in the `<meta>` tags on their users' pages. The problem is patched in `tests-passed` version 2.8.0.beta11, `beta` version 2.8.0.beta11, and `stable` version 2.7.13 of Discourse."},{"lang":"es","value":"Discourse es una plataforma de debate de código abierto. En versiones anteriores a 2.8.0.beta11 en la rama \"tests-passed\", la versión 2.8.0.beta11 en la rama \"beta\", y la versión 2.7.13 en la rama \"stable\", las biografías de los usuarios que hacían sus perfiles privados seguían siendo visibles en las etiquetas \"(meta)\" de sus páginas de usuario. El problema está parcheado en la versión 2.8.0.beta11 de \"tests-passed\", la versión 2.8.0.beta11 de \"beta\" y la versión 2.7.13 de \"stable\" de Discourse"}],"affected":[{"source":"security-advisories@github.com","affectedData":[{"vendor":"discourse","product":"discourse","versions":[{"version":"< 2.7.13","status":"affected"},{"version":"< 2.8.0.beta11","status":"affected"}]}]}],"metrics":{"cvssMetricV31":[{"source":"security-advisories@github.com","type":"Secondary","cvssData":{"version":"3.1","vectorString":"CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:N","baseScore":4.3,"baseSeverity":"MEDIUM","attackVector":"NETWORK","attackComplexity":"LOW","privilegesRequired":"LOW","userInteraction":"NONE","scope":"UNCHANGED","confidentialityImpact":"LOW","integrityImpact":"NONE","availabilityImpact":"NONE"},"exploitabilityScore":2.8,"impactScore":1.4},{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"3.1","vectorString":"CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:N","baseScore":4.3,"baseSeverity":"MEDIUM","attackVector":"NETWORK","attackComplexity":"LOW","privilegesRequired":"LOW","userInteraction":"NONE","scope":"UNCHANGED","confidentialityImpact":"LOW","integrityImpact":"NONE","availabilityImpact":"NONE"},"exploitabilityScore":2.8,"impactScore":1.4}],"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:S/C:P/I:N/A:N","baseScore":4.0,"accessVector":"NETWORK","accessComplexity":"LOW","authentication":"SINGLE","confidentialityImpact":"PARTIAL","integrityImpact":"NONE","availabilityImpact":"NONE"},"baseSeverity":"MEDIUM","exploitabilityScore":8.0,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}],"ssvcV203":[{"source":"134c704f-9b21-4f2e-91b3-4a467353bcc0","ssvcData":{"timestamp":"2025-04-23T14:12:20.672874Z","id":"CVE-2022-21678","options":[{"exploitation":"none"},{"automatable":"no"},{"technicalImpact":"partial"}],"role":"CISA Coordinator","version":"2.0.3"}}]},"weaknesses":[{"source":"security-advisories@github.com","type":"Secondary","description":[{"lang":"en","value":"CWE-200"}]},{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-863"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:discourse:discourse:*:*:*:*:*:*:*:*","versionEndExcluding":"2.7.13","matchCriteriaId":"131D6FC3-2C60-4524-9B4E-F8316312A606"},{"vulnerable":true,"criteria":"cpe:2.3:a:discourse:discourse:2.8.0:beta1:*:*:*:*:*:*","matchCriteriaId":"9E7F8AC4-35D1-45E5-8A3A-B0205000A5D3"},{"vulnerable":true,"criteria":"cpe:2.3:a:discourse:discourse:2.8.0:beta10:*:*:*:*:*:*","matchCriteriaId":"7A24507D-6D4B-4992-BCFE-232AF3BFCC30"},{"vulnerable":true,"criteria":"cpe:2.3:a:discourse:discourse:2.8.0:beta2:*:*:*:*:*:*","matchCriteriaId":"B9AE12FE-0396-4843-8D30-D8C44FAE01DA"},{"vulnerable":true,"criteria":"cpe:2.3:a:discourse:discourse:2.8.0:beta3:*:*:*:*:*:*","matchCriteriaId":"F101AEAB-4FB7-4BE3-931B-595702D616C7"},{"vulnerable":true,"criteria":"cpe:2.3:a:discourse:discourse:2.8.0:beta4:*:*:*:*:*:*","matchCriteriaId":"F6878B7F-2691-4D3F-8116-CB282FDAAAC7"},{"vulnerable":true,"criteria":"cpe:2.3:a:discourse:discourse:2.8.0:beta5:*:*:*:*:*:*","matchCriteriaId":"76EABAB9-BEA4-48D4-ADBA-D00746B29C52"},{"vulnerable":true,"criteria":"cpe:2.3:a:discourse:discourse:2.8.0:beta6:*:*:*:*:*:*","matchCriteriaId":"82A255A2-4658-41AD-A4DE-A7F8D018028D"},{"vulnerable":true,"criteria":"cpe:2.3:a:discourse:discourse:2.8.0:beta7:*:*:*:*:*:*","matchCriteriaId":"E5804585-2EA4-4677-8EC1-5F561D5C7D7A"},{"vulnerable":true,"criteria":"cpe:2.3:a:discourse:discourse:2.8.0:beta8:*:*:*:*:*:*","matchCriteriaId":"082A6871-080A-4AA7-AF4A-D664EA46488A"},{"vulnerable":true,"criteria":"cpe:2.3:a:discourse:discourse:2.8.0:beta9:*:*:*:*:*:*","matchCriteriaId":"8A280205-A2DC-4E30-937B-5564C779FD5A"}]}]}],"references":[{"url":"https://github.com/discourse/discourse/commit/5e2e178fcfb490c37b9f8bb9f737185441b1d6de","source":"security-advisories@github.com","tags":["Patch","Third Party Advisory"]},{"url":"https://github.com/discourse/discourse/commit/c0bb775f3f35b1b0d04a5b2a984f57c3e39f9e6c","source":"security-advisories@github.com","tags":["Patch","Third Party Advisory"]},{"url":"https://github.com/discourse/discourse/security/advisories/GHSA-jwww-46gv-564m","source":"security-advisories@github.com","tags":["Patch","Third Party Advisory"]},{"url":"https://github.com/discourse/discourse/commit/5e2e178fcfb490c37b9f8bb9f737185441b1d6de","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Third Party Advisory"]},{"url":"https://github.com/discourse/discourse/commit/c0bb775f3f35b1b0d04a5b2a984f57c3e39f9e6c","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Third Party Advisory"]},{"url":"https://github.com/discourse/discourse/security/advisories/GHSA-jwww-46gv-564m","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Third Party Advisory"]}]}}]}