CVE-2023-28111 MEDIUM

CVE-2023-28111: Discourse vulnerable to SSRF protection bypass possible with IPv4-mapped IPv6 addresses

Vendor Discourse
Product discourse
Weakness CWE-918 · SSRF
Published March 17, 2023
Last update February 25, 2025
View on NVD All CVEs

CVSS base score

5.7/10
Attack vector Network
Attack complexity Low
Privileges required Low
User interaction Required
Confidentiality High
Integrity None

CVSS vector

CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:U/C:H/I:N/A:N

What the vulnerability does

01Description

Discourse is an open-source discussion platform. Prior to version 3.1.0.beta3 of the `beta` and `tests-passed` branches, attackers are able to bypass Discourse's server-side request forgery (SSRF) protection for private IPv4 addresses by using a IPv4-mapped IPv6 address. The issue is patched in the latest beta and tests-passed version of Discourse. version 3.1.0.beta3 of the `beta` and `tests-passed` branches. There are no known workarounds.

Key dates

02Disclosure timeline

March 17, 2023 CVE published
February 25, 2025 Record updated

Related vulnerabilities

04Related CVE

CVE-2026-26013 LangChain affected by SSRF via image_url token counting in ChatOpenAI.get_num_tokens_from_messages CVE-2025-13809 orionsec orion-ops SSH Connection MachineInfoController.java server-side request forgery CVE-2024-0649 ZhiHuiYun Search ImageController.php download_network_image server-side request forgery CVE-2025-20371 Unauthenticated Blind Server Side Request Forgery (SSRF) in Splunk Enterprise CVE-2024-56470 IBM Aspera Shares Server-Side Request Forgery