Discourse is an open source discussion platform. Prior to version 2.8.0.beta11 in the tests-passed
branch, version 2.8.0.beta11 in the beta
branch, and version 2.7.13 in the stable
branch, the bios of users who made their profiles private were still visible in the <meta>
tags on their users' pages. The problem is patched in tests-passed
version 2.8.0.beta11, beta
version 2.8.0.beta11, and stable
version 2.7.13 of Discourse.
{ "cpes": [ "cpe:2.3:a:discourse:discourse:*:*:*:*:*:*:*:*", "cpe:2.3:a:discourse:discourse:2.8.0:beta10:*:*:*:*:*:*", "cpe:2.3:a:discourse:discourse:2.8.0:beta1:*:*:*:*:*:*", "cpe:2.3:a:discourse:discourse:2.8.0:beta2:*:*:*:*:*:*", "cpe:2.3:a:discourse:discourse:2.8.0:beta3:*:*:*:*:*:*", "cpe:2.3:a:discourse:discourse:2.8.0:beta4:*:*:*:*:*:*", "cpe:2.3:a:discourse:discourse:2.8.0:beta5:*:*:*:*:*:*", "cpe:2.3:a:discourse:discourse:2.8.0:beta6:*:*:*:*:*:*", "cpe:2.3:a:discourse:discourse:2.8.0:beta7:*:*:*:*:*:*", "cpe:2.3:a:discourse:discourse:2.8.0:beta8:*:*:*:*:*:*", "cpe:2.3:a:discourse:discourse:2.8.0:beta9:*:*:*:*:*:*" ], "severity": "Medium" }