CVE-2022-46177

Discourse is an option source discussion platform. Prior to version 2.8.14 on the `stable` branch and version 3.0.0.beta16 on the `beta` and `tests-passed` branches, when a user requests for a password reset link email, then changes their primary email, the old reset email is still valid. When the old reset email is used to reset the password, the Discourse account's primary email would be re-linked to the old email. If the old email address is compromised or has transferred ownership, this leads to an account takeover. This is however mitigated by the SiteSetting `email_token_valid_hours` which is currently 48 hours. Users should upgrade to versions 2.8.14 or 3.0.0.beta15 to receive a patch. As a workaround, lower `email_token_valid_hours ` as needed.

• CWE-613

• https://github.com/discourse/discourse/commit/4bf306f0e3bf54a9ef9c5886bf1cfb85c20da570Patch, Third Party Advisory
• https://github.com/discourse/discourse/commit/83944213b2b2454af80d0407f60d67641b1f0b38Patch, Third Party Advisory
• https://github.com/discourse/discourse/security/advisories/GHSA-5www-jxvf-vrc3Third Party Advisory
• https://github.com/discourse/discourse/commit/4bf306f0e3bf54a9ef9c5886bf1cfb85c20da570Patch, Third Party Advisory
• https://github.com/discourse/discourse/commit/83944213b2b2454af80d0407f60d67641b1f0b38Patch, Third Party Advisory
• https://github.com/discourse/discourse/security/advisories/GHSA-5www-jxvf-vrc3Third Party Advisory

Published

Jan 5, 2023

Last Modified

Jun 17, 2026

Status

Modified

• How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
• Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
• PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
• AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.

• CVE-2022-46171Tauri is a framework for building binaries for all major des…7.7
• CVE-2022-46172authentik is an open-source Identity provider focused on fle…6.4
• CVE-2022-46173Elrond-GO is a go implementation for the Elrond Network prot…6.5
• CVE-2022-46174efs-utils is a set of Utilities for Amazon Elastic File Syst…4.2
• CVE-2022-46175JSON5 is an extension to the popular JSON file format that a…8.8
• CVE-2022-46176Cargo is a Rust package manager. The Rust Security Response …5.9
• CVE-2022-46178MeterSphere is a one-stop open source continuous testing pla…8.8
• CVE-2022-46179LiuOS is a small Python project meant to imitate the functio…7.8
• CVE-2022-4618Rejected reason: DO NOT USE THIS CANDIDATE NUMBER. ConsultID…
• CVE-2022-46180Discourse Mermaid (discourse-mermaid-theme-component) allows…5.4
• CVE-2022-46181Gotify server is a simple server for sending and receiving m…5.4
• CVE-2022-46182Rejected reason: DO NOT USE THIS CANDIDATE NUMBER. ConsultID…