Hi, I’m getting messages from our central IT complaining that our Discourse instance is triggering a security warning on CVE-2021-41163, which regards the /webhooks/aws endpoint. I’ve told them that we’ve kept the software up to date since 2021 (we do a “launcher app rebuild” every month automatic…

Sounds like a bad CISO then… :roll_eyes: File a bug report at the scanner corp?

[이미지] rbos: So I’m pretty sure their scanner is just mis-parsing the version string, It shouldn’t be too hard to explain to them that there is a new versioning scheme and their scanner doesn’t understand? Which is the same reason why Microsoft skipped Windows 9. Esp since you can prove that …

You would really think so. I’ve done that three times, but scanner says bad therefore bad.

CVE-2021-41163 오탐지

지원

RGJ (Richard - Communiteq) 1월 6, 2026, 10:23오후 4

Sounds like a bad CISO then…

File a bug report at the scanner corp?

글		댓글	조회수
Discourse Vulnerability CVE-2021-41163 Self-hosting	10	1540	10월 30, 2021
Unable to find discourse version 2.9.0.beta6 Support	3	702	7월 4, 2022
Discourse Vulnerability [False Positive] Support	2	1521	6월 10, 2019
Discourse updates - Microsoft Defender reports detection of Wacatac malware Support	7	316	2월 4, 2025
⚠ v2026.3.0-latest.1 has 33 security fixes, is already 6 days old Support	8	448	3월 26, 2026

CVE-2021-41163 오탐지

Related topics