Hi, I’m getting messages from our central IT complaining that our Discourse instance is triggering a security warning on CVE-2021-41163, which regards the /webhooks/aws endpoint. I’ve told them that we’ve kept the software up to date since 2021 (we do a “launcher app rebuild” every month automatic…

Sounds like a bad CISO then… :roll_eyes: File a bug report at the scanner corp?

[圖片] rbos: So I’m pretty sure their scanner is just mis-parsing the version string, It shouldn’t be too hard to explain to them that there is a new versioning scheme and their scanner doesn’t understand? Which is the same reason why Microsoft skipped Windows 9. Esp since you can prove that t…

You would really think so. I’ve done that three times, but scanner says bad therefore bad.

CVE-2021-41163 误报

支持

RGJ (Richard - Communiteq) 2026年一月6日 22:23 4

听起来像是个糟糕的首席信息安全官……

向扫描仪公司提交错误报告？

話題		回覆	觀看
Discourse Vulnerability CVE-2021-41163 Self-hosting	10	1570	2021年十月30日
Unable to find discourse version 2.9.0.beta6 Support	3	711	2022年七月4日
Discourse Vulnerability [False Positive] Support	2	1527	2019年六月10日
Discourse updates - Microsoft Defender reports detection of Wacatac malware Support	7	338	2025年二月4日
⚠ v2026.3.0-latest.1 has 33 security fixes, is already 6 days old Support	8	494	2026年三月26日

CVE-2021-41163 误报

相關主題