CVE-2023-43814

Discourse is an open source platform for community discussion. Attackers with details specific to a poll in a topic can use the `/polls/grouped_poll_results` endpoint to view the content of options in the poll and the number of votes for groups of poll participants. This impacts private polls where the results were intended to only be viewable by authorized users. This issue is patched in the 3.1.1 stable and 3.2.0.beta2 versions of Discourse. There is no workaround for this issue apart from upgrading to the fixed version.

• CWE-200
• CWE-284

• https://github.com/discourse/discourse/security/advisories/GHSA-3x57-846g-7qcwVendor Advisory
• https://github.com/discourse/discourse/security/advisories/GHSA-3x57-846g-7qcwVendor Advisory

Published

Oct 16, 2023

Last Modified

Jun 17, 2026

Status

Modified

• Uncovering a hidden BOLA in Appsmith's snapshot logicStrix autonomously discovered a BOLA/IDOR vulnerability in Appsmith's snapshot deletion path.
• Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
• PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
• AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.

• CVE-2023-43804urllib3 is a user-friendly HTTP client library for Python. u…8.1
• CVE-2023-43805Nexkey is a fork of Misskey, an open source, decentralized s…7.5
• CVE-2023-43809Soft Serve is a self-hostable Git server for the command lin…7.5
• CVE-2023-4381Unverified Password Change in GitHub repository instantsoft/…4.3
• CVE-2023-43810OpenTelemetry, also known as OTel for short, is a vendor-neu…7.5
• CVE-2023-43813GLPI is a free asset and IT management software package. Sta…8.8
• CVE-2023-43815A buffer overflow vulnerability exists in Delta Electronics …7.8
• CVE-2023-43816A buffer overflow vulnerability exists in Delta Electronics …7.8
• CVE-2023-43817A buffer overflow exists in Delta Electronics Delta Industri…7.8
• CVE-2023-43818A buffer overflow exists in Delta Electronics Delta Industri…7.8
• CVE-2023-43819A stack based buffer overflow exists in Delta Electronics De…7.8
• CVE-2023-4382A vulnerability, which was classified as problematic, has be…5.4