CVE-2023-47119

Discourse is an open source platform for community discussion. Prior to version 3.1.3 of the `stable` branch and version 3.2.0.beta3 of the `beta` and `tests-passed` branches, some links can inject arbitrary HTML tags when rendered through our Onebox engine. The issue is patched in version 3.1.3 of the `stable` branch and version 3.2.0.beta3 of the `beta` and `tests-passed` branches. There are no known workarounds.

• CWE-74
• CWE-79

• https://github.com/discourse/discourse/commit/628b293ff53fb617b3464dd27268aec84388cc09Patch
• https://github.com/discourse/discourse/commit/d78357917c6a917a8a27af68756228e89c69321cPatch
• https://github.com/discourse/discourse/security/advisories/GHSA-j95w-5hvx-jp5wVendor Advisory
• https://github.com/discourse/discourse/commit/628b293ff53fb617b3464dd27268aec84388cc09Patch
• https://github.com/discourse/discourse/commit/d78357917c6a917a8a27af68756228e89c69321cPatch
• https://github.com/discourse/discourse/security/advisories/GHSA-j95w-5hvx-jp5wVendor Advisory

Published

Nov 10, 2023

Last Modified

Jun 17, 2026

Status

Modified

• How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
• Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
• PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
• AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.

• CVE-2023-47113BleachBit cleans files to free disk space and to maintain pr…7.3
• CVE-2023-47114Fides is an open-source privacy engineering platform for man…6.1
• CVE-2023-47115Label Studio is an a popular open source data labeling tool.…5.4
• CVE-2023-47116Label Studio is a popular open source data labeling tool. Th…5.3
• CVE-2023-47117Label Studio is an open source data labeling tool. In all cu…7.5
• CVE-2023-47118ClickHouse® is an open-source column-oriented database manag…9.8
• CVE-2023-4712A vulnerability, which was classified as critical, was found…9.8
• CVE-2023-47120Discourse is an open source platform for community discussio…7.5
• CVE-2023-47121Discourse is an open source platform for community discussio…9.8
• CVE-2023-47122Gitsign is software for keyless Git signing using Sigstore. …5.3
• CVE-2023-47123iTop is an IT service management platform. By filling malic…5.4
• CVE-2023-47124Traefik is an open source HTTP reverse proxy and load balanc…5.9