# Discourse の脆弱性（誤検知）

**URL:** <https://meta.discourse.org/t/discourse-vulnerability-false-positive/119958>\
**Category:** Support\
**Created:** [2019 年 6 月 10 日午後 8:59 UTC](https://meta.discourse.org/t/discourse-vulnerability-false-positive/119958 "2019-06-10T20:59:38Z")\
**Posts on this page:** 1\
**Showing post:** 1

<div class="post-metadata">

**Author:** ![arcreigh](https://avatars.discourse-cdn.com/v4/letter/a/71e660/32.png) [@arcreigh](https://meta.discourse.org/u/arcreigh)\
**Post date:** [2019 年 6 月 10 日午後 8:59 UTC](https://meta.discourse.org/t/discourse-vulnerability-false-positive/119958/1 "2019-06-10T20:59:38Z")

</div>

It appears there is a CVE out for the discourse admin page. 100005 DotNetNuke - File Inclusion - CVE:CVE-2018-9126, CVE:CVE-2011-1892.

Cloudflare was triggered while trying to update my discourse installation it 403’d this URI /admin/docker/latest?path=%2Fvar%2Fwww%2Fdiscourse&version=c093fa0&branch=origin%2Ftests-passed

This prevented update checking to continue. Whitelisting my IP in cloudflare resolved this issue.

---

_[View the full topic](https://meta.discourse.org/t/discourse-vulnerability-false-positive/119958)._