CVE-2022-31025

Discourse is an open source platform for community discussion. Prior to version 2.8.4 on the `stable` branch and 2.9.0beta5 on the `beta` and `tests-passed` branches, inviting users on sites that use single sign-on could bypass the `must_approve_users` check and invites by staff are always approved automatically. The issue is patched in Discourse version 2.8.4 on the `stable` branch and version `2.9.0.beta5` on the `beta` and `tests-passed` branches. As a workaround, disable invites or increase `min_trust_level_to_allow_invite` to reduce the attack surface to more trusted users.

• CWE-285

• https://github.com/discourse/discourse/commit/0fa0094531efc82d9371f90a02aa804b176d59cfPatch, Third Party Advisory
• https://github.com/discourse/discourse/commit/7c4e2d33fa4b922354c177ffc880a2f2701a91f9Patch, Third Party Advisory
• https://github.com/discourse/discourse/pull/16974Patch, Third Party Advisory
• https://github.com/discourse/discourse/pull/16984Patch, Third Party Advisory
• https://github.com/discourse/discourse/security/advisories/GHSA-x7jh-mx5q-6f9qThird Party Advisory
• https://github.com/discourse/discourse/commit/0fa0094531efc82d9371f90a02aa804b176d59cfPatch, Third Party Advisory
• https://github.com/discourse/discourse/commit/7c4e2d33fa4b922354c177ffc880a2f2701a91f9Patch, Third Party Advisory
• https://github.com/discourse/discourse/pull/16974Patch, Third Party Advisory
• https://github.com/discourse/discourse/pull/16984Patch, Third Party Advisory
• https://github.com/discourse/discourse/security/advisories/GHSA-x7jh-mx5q-6f9qThird Party Advisory

Published

Jun 7, 2022

Last Modified

Jun 17, 2026

Status

Modified

• Uncovering a hidden BOLA in Appsmith's snapshot logicStrix autonomously discovered a BOLA/IDOR vulnerability in Appsmith's snapshot deletion path.
• Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
• PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
• AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.

• CVE-2022-31019Vapor is a server-side Swift HTTP web framework. When using …7.5
• CVE-2022-31020Indy Node is the server portion of a distributed ledger purp…8.8
• CVE-2022-31021Ursa is a cryptographic library for use with blockchains. A …5.3
• CVE-2022-31022Bleve is a text indexing library for go. Bleve includes HTTP…5.5
• CVE-2022-31023Play Framework is a web framework for Java and Scala. Verion…7.5
• CVE-2022-31024richdocuments is the repository for NextCloud Collabra, the …6.5
• CVE-2022-31026Trilogy is a client library for MySQL. When authenticating, …7.5
• CVE-2022-31027OAuthenticator is an OAuth token library for the JupyerHub l…6.5
• CVE-2022-31028MinIO is a multi-cloud object storage solution. Starting wit…7.5
• CVE-2022-31029AdminLTE is a Pi-hole Dashboard for stats and configuration.…4.8
• CVE-2022-3103off-by-one in io_uring module.7.8
• CVE-2022-31030containerd is an open source container runtime. A bug was fo…5.5