Not a U.S. government website. NDD is an independent vulnerability database by Volerion and is not affiliated with or endorsed by NIST or NVD.
VOLERION
Volerion Security Research

NOT DEFERRED DATABASE

VULNERABILITIES

CVE-2022-31182 Details

Description

Discourse is the an open source discussion platform. In affected versions a maliciously crafted request for static assets could cause error responses to be cached by Discourse's default NGINX proxy configuration. A corrected NGINX configuration is included in the latest stable, beta and tests-passed versions of Discourse. Users are advised to upgrade. There are no known workarounds for this vulnerability.

Metrics

References to Advisories, Solutions, and Tools

By selecting these links, you will be leaving this site. These are references gathered from the official CVE record and are not endorsed by Volerion.

URLSource(s)Tag(s)
https://github.com/discourse/discourse/commit/7af25544c3940c4d046c51f4cfac9c72a06d4f50 CVEPatchThird Party Advisory
https://github.com/discourse/discourse/security/advisories/GHSA-4ff8-3j78-w6pp CVEThird Party Advisory
https://github.com/discourse/discourse/commit/7af25544c3940c4d046c51f4cfac9c72a06d4f50 [email protected]PatchThird Party Advisory
https://github.com/discourse/discourse/security/advisories/GHSA-4ff8-3j78-w6pp [email protected]Third Party Advisory

Weakness Enumeration

CWE-IDCWE NameSource
CWE-404Improper Resource Shutdown or Release[email protected]

Affected Products

ProductVersions
discourse discourse
< 2.8.7
2.9.0 beta7

CPE

  • cpe:2.3:a:discourse:discourse:*:*:*:*:*:*:*:*
  • cpe:2.3:a:discourse:discourse:2.9.0:beta7:*:*:*:*:*:*

Remediation

  • No remediation found in references.

Change History

5 change records found show changes

QUICK INFO

CVE Dictionary Entry:
CVE-2022-31182
NVD Published Date:
Aug 1, 2022
NVD Last Modified:
Jun 17, 2026
Source:
[email protected]
CVE-2022-31182 Details - Not Deferred