Advisories · Technology
discourse.
Every CVE that names discourse among its affected products, newest first. Vendors and products are as the CNA wrote them; check the affected versions on each record.
- CVSS 8.0 High
Discourse vulnerable to Cross-site Scripting through pending post titles descriptions
- discourse
- Cross-site scripting (XSS)
- CVSS 5.3 Medium
Discourse vulnerable to exposure of user post counts per topic to unauthorized users
- discourse
- Information disclosure
- CVSS 5.7 Medium
Discourse password reset link can lead to in account takeover if user changes to a new email
- discourse
- Authentication bypass
- CVSS 5.5 Medium
Discourse vulnerable to private topic leak via email#send_digest
- discourse
- Information disclosure
- CVSS 3.5 Low
Group SMTP user emails are exposed in CC email header
- discourse
- Information disclosure
- CVSS 5.7 Medium
Discourse vulnerable to bypass of post max_length using HTML comments
- discourse
- CWE-20
- CVSS 6.5 Medium
Regular expression denial of service in discourse
- discourse
- Denial of service
- CVSS 4.3 Medium
Any authenticated Discourse user can create an unlisted topic
- discourse
- Denial of service
- CVSS 4.3 Medium
Discourse may allow exposure of hidden tags in the subject of notification emails
- discourse
- Information disclosure
- CVSS 7.1 High
Discourse allows self-XSS through malicious composer message
- discourse
- Cross-site scripting (XSS)
- CVSS 3.5 Low
Discourse users can see notifications for topics they no longer have access to
- discourse
- Information disclosure
- CVSS 3.5 Low
Discourse chat messages should have a maximum character limit
- discourse
- CWE-20
- CVSS 6.5 Medium
Users erroneously and transparently added to private messages in Discourse
- discourse
- Information disclosure
- CVSS 5.3 Medium
Displaying user badges can leak topic titles to users that have no access to the topic
- discourse
- Information disclosure
- CVSS 8.9 High
Discourse user account takeover via email and invite link
- discourse
- Broken access control
- CVSS 7.6 High
Possible Server-Side Request Forgery (SSRF) in webhooks
- discourse
- Server-side request forgery (SSRF)
- CVSS 6.5 Medium
Discourse vulnerable to incomplete quote causing a topic to crash in the browser
- discourse
- CWE-20
- CVSS 4.3 Medium
Discourse user profile location and website fields were not sufficiently length-limited
- discourse
- Denial of service
- CWE-20
- CVSS 7.2 High
Discourse moderators can edit themes via the API
- discourse
- Broken access control
- CVSS 9.1 CriticalCritical · CVSS 9+
Discourse vulnerable to RCE via admins uploading maliciously zipped file
- discourse
- Unrestricted file upload
- CVSS 6.5 Medium
Email activation route can be abused by spammers in Discourse
- discourse
- Denial of service
- CVSS 5.3 Medium
Cache poisoning via maliciously-formed request in Discourse
- discourse
- Denial of service
- CVSS 5.7 Medium
Invites restricted to an email or invite links restricted to an email domain may be bypassed by a under certain conditions in Discourse
- discourse
- CWE-281
- CVSS 5.3 Medium
Banner topic data is exposed on login-required Discourse sites
- discourse
- Information disclosure
- CVSS 2.6 Low
Invite bypasses user approval in Discourse
- discourse
- Broken access control
- CVSS 5.3 Medium
Category group permissions leaked in Discourse
- discourse
- Information disclosure
- CVSS 5.3 Medium
Anonymous user cache poisoning in discourse
- discourse
- CWE-829
- CVSS 5.3 Medium
Private group name exposure in discourse
- discourse
- Information disclosure
- CVSS 4.3 Medium
Secure category names leaked via user activity export in Discourse
- discourse
- Information disclosure
- CVSS 6.5 Medium
Denial of Service in Discourse
- discourse
- Denial of service
- CVSS 4.3 Medium
Group advanced search option may leak group and group's members visibility
- discourse
- Information disclosure
- CVSS 4.3 Medium
User can bypass approval when invited to Discourse
- discourse
- Authentication bypass
- CVSS 4.3 Medium
User's bio visible even if profile is restricted in Discourse
- discourse
- Information disclosure
- CVSS 4.3 Medium
Exposure of whisper participants in discourse
- discourse
- Information disclosure
- CVSS 6.8 Medium
Denial of Service in discourse
- discourse
- CWE-20
- CVSS 4.3 Medium
Bypass of Poll voting limits in Discourse
- discourse
- Privilege escalation
- CVSS 5.3 Medium
Anonymous user cache poisoning via development-mode header in Discourse
- discourse
- CWE-610
- CVSS 4.3 Medium
Notifications leak in Discourse
- discourse
- Information disclosure
- CVSS 4.8 Medium
Cache poisoning via maliciously-formed request in discourse
- discourse
- Information disclosure
- CVSS 10.0 CriticalCritical · CVSS 9+, CVSS 7+ and EPSS
RCE via malicious SNS subscription payload
- discourse
- Other injection
- CVSS 4.2 Medium
XSS via blocked watched word in error message
- discourse
- Cross-site scripting (XSS)
- CVSS 7.5 High
Private message title and participating users leaked in discourse
- discourse
- Information disclosure
- CVSS 4.4 Medium
Cross-site scripting via category name in Discourse
- discourse
- Cross-site scripting (XSS)
- CVSS 4.3 Medium
Information exposure in Discourse
- discourse
- Information disclosure
- CVSS 5.3 Medium
Re-use of email tokens in Discourse
- discourse
- Authentication bypass
- CWE-640
- CVSS 7.4 High
XSS via d-popover and d-html-popover attribute
- discourse
- Cross-site scripting (XSS)
- CVSS 4.3 Medium
Post creator of a whisper post can be revealed to non-staff users in Discourse
- discourse
- Information disclosure
- CVSS 8.1 High
YouTube Onebox susceptible to XSS
- discourse
- Cross-site scripting (XSS)
-
Discourse: Discourse before 2.3.0 and 2.4.x before 2.4.0.beta3 lacks a confirmation screen when…
- Discourse
-
Discourse: Discourse before 2.3.0 and 2.4.x before 2.4.0.beta3 lacks a confirmation screen when…
- Discourse