CISA urged developers to update Discourse versions 2.7.8 and earlier in a notice sent out on Sunday, warning that a remote code execution vulnerability was tagged as “critical.” The issue was patched on Friday and developers explained that CVE-2021-41163 involved “a validation bug in the upstream aws-sdk-sns gem”

Read full article on ZDNet