Advisories · Technology
discourse.
Every CVE that names discourse among its affected products, newest first. Vendors and products are as the CNA wrote them; check the affected versions on each record.
- CVSS 5.4 Medium
DIscourse's discourse-policy plugin lacks post access check
- discourse
- Broken access control
- CVSS 7.5 High
Discourse has authentication bypass vulnerability in the Patreon plugin webhook endpoint
- discourse
- Broken access control
- CVSS 6.5 Medium
Discourse doesn't ensure webhooks require a token
- discourse
- Authentication bypass
- CVSS 6.5 Medium
Discourse staff action logs expose sensitive information to moderators
- discourse
- Broken access control
- CVSS 6.9 Medium
Discourse allows permalinks to restricted resources to leak resource slugs to unauthorized users
- discourse
- Information disclosure
- CVSS 6.5 Medium
Discourse topic conversion permission vulnerability for moderators
- discourse
- Broken access control
- CVSS 5.1 Medium
Discourse has insecure default configuration that allows non-admin moderators to takeover any non-staff account via email change
- discourse
- Broken access control
- CVSS 7.1 High
Discourse moderators can access admin-only reports exposing private upload URLs
- discourse
- Broken access control
- CVSS 6.5 Medium
Discourse Has Denial of Service (DoS) Vulnerability in Drafts Creation Endpoint
- discourse
- Denial of service
- CVSS 6.9 Medium
Discourse non-admin moderators can exfiltrate private content via post ownership transfer
- discourse
- Broken access control
- CVSS 5.9 Medium
Discourse users archives leaked to users with moderation privileges
- discourse
- Broken access control
- CVSS 7.6 High
FinalDestination hostname matching allows SSRF protection bypass
- discourse
- Server-side request forgery (SSRF)
- CVSS 5.3 Medium
Discourse AI Discover's continue conversation allows threat actor to impersonate user
- discourse
- Broken access control
- CVSS 4.3 Medium
Discourse has DoS vulnerability in username change endpoint
- discourse
- Denial of service
- CVSS 7.1 High
Discourse subscriptions are susceptible to takeover
- discourse
- Broken access control
- CVSS 4.6 Medium
Discourse vulnerable to stored Cross-site Scripting via Katex in discourse-math plugin
- discourse
- Cross-site scripting (XSS)
- CVSS 4.6 Medium
Discourse allows script execution in uploaded HTML/XML files on S3
- discourse
- CWE-116
- CVSS 6.3 Medium
Users are able to find users by name even when `enable_names` is off
- discourse
- CWE-202
- CVSS 6.3 Medium
Discourse is missing Cache-Control response header on error responses
- discourse
- CWE-524
- CVSS 5.5 Medium
Discourse: Cross-Site Data Exposure via Backup Restore Metacommand Injection in Multisite Deployments
- discourse
- Command injection
- CVSS 4.3 Medium
Discourse AI Suggestions Contain Insecure Direct Object Reference
- discourse
- Broken access control
- CVSS 3.5 Low
Discourse is vulnerable to XSS when quoting chat messages
- discourse
- Cross-site scripting (XSS)
- CVSS 2.4 Low
Discourse welcome banner user name XSS
- discourse
- Cross-site scripting (XSS)
- CVSS 8.2 High
Discourse's WebAuthn challenge isn't cleared from user session after authentication
- discourse
- Authentication bypass
- CVSS 6.3 Medium
Discourse users are able to see their own whispers even after being removed from a group that has been configured to see whispers
- discourse
- Information disclosure
- CVSS 8.1 High
Discourse vulnerable to XSS via user-provided query parameter in oauth failure flow
- discourse
- Cross-site scripting (XSS)
- CVSS 8.1 High
Discourse vulnerable to auto-executing of third-party code in embedded CodePen iframe
- discourse
- CWE-1038
- CVSS 7.1 High
Discourse vulnerable to HTML injection when inviting to topic via email
- discourse
- Cross-site scripting (XSS)
- CWE-116
- CVSS 8.7 High
Discourse vulnerable to DoS via large URL payload in PM to a bot
- discourse
- Denial of service
- CVSS 5.8 Medium
Private data leak on login-required Discourse sites
- discourse
- Information disclosure
- CVSS 4.8 Medium
Discourse DM limits aren’t always properly enforced
- discourse
- Broken access control
- CVSS 4.3 Medium
Discourse may bypass user preference when adding users to chat groups
- discourse
- Broken access control
- CVSS 4.3 Medium
Discourse has race condition when adding users to a group DM
- discourse
- Race condition
- CVSS 4.3 Medium
Cross-site Scripting (XSS) via topic titles when CSP disabled in Discourse
- discourse
- Cross-site scripting (XSS)
- CVSS 4.3 Medium
Partial denial of service via inline oneboxes in Discourse
- discourse
- Denial of service
- CVSS 4.3 Medium
Potential bypass of chat permissions in Discourse
- discourse
- CWE-281
- CVSS 8.2 High
Anonymous cache poisoning via XHR requests in Discourse
- discourse
- CWE-346
- CVSS 2.2 Low
Users can see other user's tagged PMs in Discourse
- discourse
- Information disclosure
- CVSS 6.5 Medium
HTMLi(XSS without CSP) via Onebox urls in Discourse
- discourse
- Cross-site scripting (XSS)
- CVSS 3.1 Low
Client Side Path Traversal using activate account route in Discourse
- discourse
- Path traversal
- CVSS 6.5 Medium
Stored DOM-based XSS (without CSP) via video placeholders in Discourse
- discourse
- Cross-site scripting (XSS)
- CVSS 8.2 High
Anonymous cache poisoning via request headers in Discourse
- discourse
- CWE-346
- CVSS 5.3 Medium
Bypass of Discourse Connect using other login paths if enabled in Discourse
- discourse
- Information disclosure
- CVSS 2.2 Low
Moderators can view Screened emails even when the “moderators view emails” option is disabled in Discourse
- discourse
- Information disclosure
- CVSS 6.8 Medium
Magnific lightbox susceptible to Cross-site Scripting in Discourse
- discourse
- Cross-site scripting (XSS)
- CVSS 7.5 HighCritical · CVSS 7+ and EPSS
Potential Backup file leaked via Nginx in Discourse
- discourse
- Information disclosure
- CVSS 8.2 High
Anonymous cache poisoning via XHR requests in Discourse
- discourse
- CWE-610
- CVSS 6.5 Medium
Cross-site Scripting (XSS) via chat excerpts when content security policy (CSP) disabled in Discourse
- discourse
- Cross-site scripting (XSS)
- CVSS 7.5 High
Denial of service by the absence of restrictions on replies to posts in Discourse
- discourse
- Denial of service
- CVSS 5.3 Medium
Prevent topic list filtering by hidden tags for unauthorized users in Discourse
- discourse
- Privilege escalation
- CVSS 8.2 High
Bypass of email address validation via encoded email addresses in Discourse
- discourse
- Authentication bypass
- CVSS 6.1 Medium
Discourse allows iframe injection though default site setting
- discourse
- Other injection
- CWE-1021
- CVSS 4.9 Medium
Discourse vulnerable to DoS via Tag Group
- discourse
- Denial of service
- CVSS 6.3 Medium
Discourse has an XSS via Onebox system
- discourse
- Cross-site scripting (XSS)
- CVSS 4.9 Medium
Denial of service via Watched Words in Discourse
- discourse
- Denial of service
- CVSS 6.4 Medium
Discourse vulnerable to Server-Side Request Forgery via FastImage
- discourse
- Server-side request forgery (SSRF)
- CVSS 2.4 Low
Discourse doesn't limit reviewable user serializer payload
- discourse
- Information disclosure
- CVSS 4.9 Medium
Discourse missing authorization checks for suspending admins/moderators
- discourse
- Broken access control
- CVSS 4.2 Medium
Discourse vulnerable to stored-dom XSS via Facebook Oneboxes
- discourse
- Cross-site scripting (XSS)
- CVSS 7.5 High
Discourse vulnerable to DoS through Onebox
- discourse
- CWE-20