Expert(s): ISBuzz Staff | Informationsecuritybuzz.com »
CISA is urging admins to patch a critical (Level 10) bug found in Discourse versions 2.7.8 and earlier. Discourse released a security advisory to address a critical RCE vulnerability (CVE-2021-41163). The vuln was fixed by the developer in an urgent update on Friday. Discourse had 405 million users as of Sept. 2021 viewing 3.5 million posts.
Atom Silo grp Attacks
External Link: CISA Alert – Critical Discourse Bug