CVE-2021-3138 PoC — Discourse 安全漏洞

Source

https://github.com/Mesh3l911/CVE-2021-3138

Associated Vulnerability

Title:Discourse 安全漏洞 (CVE-2021-3138)
Description:In Discourse 2.7.0 through beta1, a rate-limit bypass leads to a bypass of the 2FA requirement for certain forms.

Description

Discource POC

Readme

# ..| Discourse 2.7.0 - CVE-2021-3138 |..

# Description :
<br>
<b>Rate limit Bypass which leads to 2FA Bypass
</b><br>
<h1>Tested Version :</h1>
<br>
<b>2.7.0
</b><br>
<h1>Attack Type: </h1>
<br>
<b>Remote
</b>
<br>
<h1>Impact :<br></h1>
<b>2FA Bypass
</b><br>
<h1>Vendor of Product :</h1>
<br>
<b>https://www.discourse.org
</b><br>
<h1>Additional Information :</h1>
<b><br>
Discourse is discussion platform built for the next decade of the Internet .Used as:<br>
-mailing list<br>
-discussion forum<br>
-long-form chat room<br>
<br>
and there are well known companies such as Google acquisitions that have been using Discourse until this moment.
<br>
</b>
<h1>Discoverer :</h1>
<b><br>
Meshal Almansour<br>
Twitter: mesh3l_911
<br>
</b>

File Snapshot

Remarks

1. It is advised to access via the original source first.

2. Local POC snapshots are reserved for subscribers — if the original source is unavailable, the local mirror is part of the paid plan.

View subscription plans →

Goal Reached Thanks to every supporter — we hit 100%!