CyberRota Analysis
AI-GeneratedThe vulnerability affects the Discourse open-source discussion platform, where post revisions intended to be hidden from regular users can be exposed through visible diffs in adjacent revisions. This could lead to unauthorized access to sensitive information, potentially compromising user privacy. Organizations using affected versions should prioritize updating to the patched releases (2026.6.0, 2026.5.1, 2026.4.2, or 2026.1.5) to mitigate this risk.
Public Exploit Signal
A public exploit, PoC, GitHub repository or Metasploit reference was detected for this CVE.
Note: these links are listed for security research and verification purposes only.
Original NVD Description
Discourse is an open-source discussion platform. Prior to 2026.6.0, 2026.5.1, 2026.4.2, and 2026.1.5, post revisions that should be hidden from regular users could be leaked through visible diffs on adjacent revisions serialized by PostRevisionSerializer. This issue is fixed in versions 2026.6.0, 2026.5.1, 2026.4.2, and 2026.1.5.
Related CVEs
Other vulnerabilities affecting the same vendor(s)