Hi, I’m getting messages from our central IT complaining that our Discourse instance is triggering a security warning on CVE-2021-41163, which regards the /webhooks/aws endpoint. I’ve told them that we’ve kept the software up to date since 2021 (we do a “launcher app rebuild” every month automatic…

Sounds like a bad CISO then… :roll_eyes: File a bug report at the scanner corp?

[이미지] rbos: So I’m pretty sure their scanner is just mis-parsing the version string, It shouldn’t be too hard to explain to them that there is a new versioning scheme and their scanner doesn’t understand? Which is the same reason why Microsoft skipped Windows 9. Esp since you can prove that …

You would really think so. I’ve done that three times, but scanner says bad therefore bad.

CVE-2021-41163 오탐지

제품 지원

RGJ (Richard - Communiteq) 1월 6, 2026, 10:23오후 4

그럼 CISO가 좀 별로네…

스캐너 회사에 버그 리포트를 올려볼까?

글		댓글	조회수
Discourse Vulnerability CVE-2021-41163 Self-hosting	10	1638	10월 30, 2021
Unable to find discourse version 2.9.0.beta6 Product Support	3	728	7월 4, 2022
Discourse Vulnerability [False Positive] Product Support	2	1543	6월 10, 2019
Discourse updates - Microsoft Defender reports detection of Wacatac malware Product Support	7	383	2월 4, 2025
⚠ v2026.3.0-latest.1 has 33 security fixes, is already 6 days old Product Support	8	523	3월 26, 2026

CVE-2021-41163 오탐지

Related topics