Hi, I’m getting messages from our central IT complaining that our Discourse instance is triggering a security warning on CVE-2021-41163, which regards the /webhooks/aws endpoint. I’ve told them that we’ve kept the software up to date since 2021 (we do a “launcher app rebuild” every month automatic…

Sounds like a bad CISO then… :roll_eyes: File a bug report at the scanner corp?

[immagine] rbos: So I’m pretty sure their scanner is just mis-parsing the version string, It shouldn’t be too hard to explain to them that there is a new versioning scheme and their scanner doesn’t understand? Which is the same reason why Microsoft skipped Windows 9. Esp since you can prove …

You would really think so. I’ve done that three times, but scanner says bad therefore bad.

Falso positivo CVE-2021-41163

Supporto

RGJ (Richard - Communiteq) 6 Gennaio 2026, 10:23pm 4

Sembra un CISO pessimo allora…

Segnalare un bug alla società dello scanner?

Argomento		Risposte	Visualizzazioni
Discourse Vulnerability CVE-2021-41163 Self-hosting	10	1521	Ottobre 30, 2021
Unable to find discourse version 2.9.0.beta6 Support	3	677	Luglio 4, 2022
Discourse Vulnerability [False Positive] Support	2	1508	Giugno 10, 2019
Discourse updates - Microsoft Defender reports detection of Wacatac malware Support	7	274	Febbraio 4, 2025
⚠ v2026.3.0-latest.1 has 33 security fixes, is already 6 days old Support	8	343	Marzo 26, 2026

Falso positivo CVE-2021-41163

Argomenti correlati