Hi, I’m getting messages from our central IT complaining that our Discourse instance is triggering a security warning on CVE-2021-41163, which regards the /webhooks/aws endpoint. I’ve told them that we’ve kept the software up to date since 2021 (we do a “launcher app rebuild” every month automatic…

Sounds like a bad CISO then… :roll_eyes: File a bug report at the scanner corp?

[صورة] rbos: So I’m pretty sure their scanner is just mis-parsing the version string, It shouldn’t be too hard to explain to them that there is a new versioning scheme and their scanner doesn’t understand? Which is the same reason why Microsoft skipped Windows 9. Esp since you can prove that…

You would really think so. I’ve done that three times, but scanner says bad therefore bad.

إيجابية خاطئة لـ CVE-2021-41163

الدعم

RGJ (Richard - Communiteq) 6 يناير 2026، 10:23م 4

يبدو وكأنه مسؤول أمن معلومات سيئ إذن…
هل تقدم تقرير خطأ إلى شركة الماسح الضوئي؟

الموضوع		الردود	مرات العرض
Discourse Vulnerability CVE-2021-41163 Self-hosting	10	1525	30 أكتوبر 2021
Unable to find discourse version 2.9.0.beta6 Support	3	680	4 يوليو 2022
Discourse Vulnerability [False Positive] Support	2	1510	10 يونيو 2019
Discourse updates - Microsoft Defender reports detection of Wacatac malware Support	7	292	4 فبراير 2025
⚠ v2026.3.0-latest.1 has 33 security fixes, is already 6 days old Support	8	353	26 مارس 2026

إيجابية خاطئة لـ CVE-2021-41163

الموضوعات ذات الصلة