CVE-2022-37458 - Discourse through 2.8.7 allows admins to send invitations to arbitrary email addresses at an unlimited rate

HIGH

Discourse through 2.8.7 allows admins to send invitations to arbitrary email addresses at an unlimited rate

Published Sep 2, 2022

7.2

HIGH

CVSS 3.1

EPSS 1.39%

Discourse through 2.8.7 allows admins to send invitations to arbitrary email addresses at an unlimited rate.

No remediation recorded yet.

Weaknesses (0)

No CWE recorded.

Link	Providers	Tags
https://euvd.enisa.europa.eu/vulnerability/EUVD-2022-40083		Advisory
https://github.com/discourse/discourse/security/advisories/GHSA-q2rg-m477-8wg7		x_refsource_MISCThird Party Advisory
https://github.com/discourse/discourse/tags		x_refsource_MISCRelease NotesThird Party Advisory
https://www.enisa.europa.eu/topics/threat-risk-management/vulnerability-disclosure		x_refsource_MISCThird Party Advisory

No recorded changes yet.

Sources

CVE.org / MITRE

Status PUBLISHED

Assigner mitre

Published Sep 2, 2022

Updated Aug 3, 2024

Reserved Aug 7, 2022

CISA Vulnrichment

No data

NVD

Status Modified

Modified Jun 17, 2026

Red Hat

No data

ENISA EUVD

Assigner mitre

Published Sep 2, 2022

Updated Aug 3, 2024

GitHub

No data