Security Advisory

CVE-2024-24755

CVE vulnerability detail — eXtreme Datacenter Security Operations

Published 2024-02-01 22:14:23
Last updated 2024-08-01 23:28:11
Assigner GitHub_M
State PUBLISHED

Description

discourse-group-membership-ip-block is a discourse plugin that adds support for adding users to groups based on their IP address. discourse-group-membership-ip-block was sending all group custom fields to the client, including group custom fields from other plugins which may expect their custom fields to remain secret.