Advisories · Technology
discourse.
Every CVE that names discourse among its affected products, newest first. Vendors and products are as the CNA wrote them; check the affected versions on each record.
- CVSS 5.3 Medium
Discourse: Group SMTP test endpoint susceptible to SSRF
- discourse
- Server-side request forgery (SSRF)
- CVSS 6.3 Medium
Discourse: Vulnerability in discourse-subscriptions plugin allowing users to self-grant to higher tier subscriptions
- discourse
- Privilege escalation
- Broken access control
- CVSS 4.3 Medium
Discourse: Authorization bypass in oneboxer via user-controlled category id
- discourse
- Information disclosure
- CVSS 5.3 Medium
Discourse: Missing post-level authorization allows whisper metadata disclosure
- discourse
- Information disclosure
- CVSS 6.3 Medium
Discourse: Insufficient topic visibility check allows unauthorized poll manipulation in private categories
- discourse
- Broken access control
- CVSS 4.3 Medium
Discourse: Unauthorized channel membership inference via excluded_memberships_channel_id
- discourse
- Information disclosure
- CVSS 5.3 Medium
Discourse: Category group moderators can perform actions on topics in restricted categories without read access
- discourse
- Broken access control
- CVSS 2.1 Low
Discourse: Stored XSS via unescaped assignee name
- discourse
- Cross-site scripting (XSS)
- CVSS 5.4 Medium
Discourse: XSS on category description update via API
- discourse
- Cross-site scripting (XSS)
- CVSS 5.3 Medium
Discourse: Stored XSS in discourse-ai shared conversations onebox
- discourse
- Cross-site scripting (XSS)
- CVSS 5.1 Medium
Discourse: Open redirect via `sso_destination_url` cookie in `enter`
- discourse
- Open redirect
- CVSS 5.3 Medium
Discourse: Admin-only report can be exported by moderators
- discourse
- Information disclosure
- CVSS 2.0 Low
discourse-subscriptions plugin leaking stripe API key in multisite environment
- discourse
- Information disclosure
- CVSS 4.9 Medium
Discourse Allows Unauthorized Access to Deleted Posts Index via Group Membership
- discourse
- Broken access control
- CVSS 2.7 Low
Discourse Authorization Page Displays Unvalidated Redirect Domain
- discourse
- Broken access control
- CVSS 3.5 Low
Discourse users can edit or synonymize hidden tags they can't see
- discourse
- Broken access control
- CVSS 6.9 Medium
Discourse has inferable private group membership or existence via exclude_groups parameter
- discourse
- Information disclosure
- Broken access control
- CVSS 5.9 Medium
PM access granted through invites after access revocation
- discourse
- Broken access control
- CVSS 1.3 Low
Discourse staff can modify any user's group notification level
- discourse
- Broken access control
- CVSS 3.5 Low
Discourse exposes ip_address of flagged user
- discourse
- Information disclosure
- CVSS 5.4 Medium
Discourse's solved topic stream has potential stored XSS in topic title
- discourse
- Cross-site scripting (XSS)
- CVSS 5.1 Medium
Discourse user can create Zendesk tickets even when it does not have access to topic
- discourse
- Broken access control
- CVSS 5.4 Medium
Discourse has a Hidden Solved topics permission bypass
- discourse
- Broken access control
- CVSS 5.3 Medium
Discourse's unscoped status lookups leak restricted metadata
- discourse
- Broken access control
- CVSS 5.3 Medium
Discourse: Composer mentions endpoint leaks hidden group membership through PM `allowed_names` check
- discourse
- Information disclosure
- Broken access control
- CVSS 5.3 Medium
Discourse has a poll authorization bypass via post_id array parameter
- discourse
- Broken access control
- CWE-20
- CVSS 5.3 Medium
Discourse hasUnauthorized Exposure of Private User Action Types
- discourse
- Information disclosure
- CVSS 5.3 Medium
Discourse has Unauthorized Post Data Exposure in discourse-user-notes
- discourse
- Broken access control
- CVSS 2.2 Low
Discourse has moderator privilege escalation via arbitrary post_id in suspend/silence endpoint
- discourse
- Privilege escalation
- CVSS 2.2 Low
Discourse has Improper Authorization in "Post Edits" Report For Moderators
- discourse
- Broken access control
- CVSS 4.4 Medium
Discourse has stored click‑based XSS via Graphviz SVG javascript: links
- discourse
- Cross-site scripting (XSS)
- CVSS 2.7 Low
Discourse leaks PM post edits to moderators
- discourse
- Information disclosure
- CVSS 4.3 Medium
Discourse fixes loose hostname matching in spam host allowlist
- discourse
- Broken access control
- CVSS 6.5 Medium
Discourse filters whisper posts from private-posts feed
- discourse
- Information disclosure
- CVSS 5.4 Medium
Discourse hardens chat DM channel creation and expansion
- discourse
- Broken access control
- CVSS 4.3 Medium
Discourse prevents hidden profile data leak via user onebox
- discourse
- Information disclosure
- CVSS 8.2 High
Discourse missing permission check for policy creation in discourse-policy
- discourse
- Broken access control
- CVSS 2.3 Low
Discourse vulnerable to group membership addition permission bypass via discourse-policy plugin
- discourse
- Broken access control
- CVSS 6.9 Medium
Discourse discloses restricted post-action counts to non-privileged users
- discourse
- Broken access control
- CVSS 6.9 Medium
Discourse leaks private topic metadata to non-authorized users
- discourse
- Information disclosure
- CVSS 8.7 High
Discourse leaks private topic title and post excerpt via user action API endpoint
- discourse
- Information disclosure
- CVSS 5.1 Medium
Discourse has Stored XSS in AI Triage Automation
- discourse
- Cross-site scripting (XSS)
- CVSS 5.1 Medium
Discourse Vulnerable to Stored XSS via Shared AI Conversation Onebox
- discourse
- Cross-site scripting (XSS)
- CVSS 6.9 Medium
Discourse has a bypass of official warnings messages by non-staff users
- discourse
- Broken access control
- CVSS 5.3 Medium
Discourse has check revision visibility on posts endpoint
- discourse
- Broken access control
- CVSS 4.1 Medium
Discourse vulnerable to HTML injection via prohibited iframe URLs
- discourse
- Cross-site scripting (XSS)
- CVSS 1.2 Low
Discourse Vulnerable to Unauthorized Topic Creation in Staff-Only Categories via Topic Timer publish_to_category
- discourse
- Broken access control
- CVSS 1.3 Low
Privilege Escalation via Mass Assignment Allows Regular Users to Set Topics as Global Banners
- discourse
- Broken access control
- CVSS 5.3 Medium
Discourse's Fail-Open Access Control in Data Explorer Plugin Allows Unauthorized SQL Query Execution
- discourse
- Broken access control
- CVSS 1.3 Low
Discourse has XSS when editing a malicious post
- discourse
- Cross-site scripting (XSS)
- CVSS 1.3 Low
Discourse doesn't prevent moderators from exporting user Chat DMs
- discourse
- Broken access control
- CVSS 1.3 Low
DIscourse has DM communication-preference bypass when adding members
- discourse
- Broken access control
- CVSS 4.9 Medium
DIscourse doesn't prevent whispers to leak in excerpts
- discourse
- Information disclosure
- CVSS 1.3 Low
Discourse doesn't validate destination topic when moving posts
- discourse
- Broken access control
- CVSS 1.3 Low
Discourse doesn't ensure guardian check when creating QueryGroupBookmark
- discourse
- Broken access control
- CVSS 4.9 Medium
Discourse has SQL injection in PM tag filtering
- discourse
- SQL injection
- CVSS 6.9 Medium
Discourse: Poll voters endpoint lacked post visibility checks
- discourse
- Broken access control
- CVSS 0.0 None
Discourse: TL4 users are able to change status of restricted topics
- discourse
- Broken access control
- CVSS 4.3 Medium
Discourse doesn't scope reviewable notes to user-visible reviewables
- discourse
- Broken access control
- CVSS 7.5 High
Discourse has IDOR vulnerability in the directory items endpoint
- discourse
- Broken access control