CVE-2023-49098: Discourse Reactions

Low severity, CVSS 3.5. EPSS: 0.3% chance of exploitation in the next 30 days.

Discourse-reactions is a plugin that allows user to add their reactions to the post. Data about a user's reaction notifications could be exposed. This vulnerability was patched in commit 2c26939.

Affected products

• Discourse Discourse Reactions: up to and including 0.4

Published 2024-01-12. Last modified 2026-06-17.