Discourse is an open source platform for community discussion. An attacker can execute arbitrary JavaScript on users' browsers by posting a malicious…
Discourse is an open source platform for community discussion. In affected versions an attacker can execute arbitrary JavaScript on users' browsers b…
Discourse is an open source platform for community discussion. Sites that are using discourse connect but still have local logins enabled could allow…
Discourse is an open source platform for community discussion. Users clicking on the lightbox thumbnails could be affected. This problem is patched i…
Discourse is an open source platform for community discussion. This vulnerability only impacts Discourse instances configured to use `FileStore::Loca…
Discourse is an open source platform for community discussion. An attacker can make several XHR requests until the cache is poisoned with a response …
Discourse is an open source platform for community discussion. An attacker can execute arbitrary JavaScript on users' browsers by sending a malicious…
Discourse is an open source platform for community discussion. A maliciously crafted email address could allow an attacker to bypass domain-based res…
Discourse Calendar plugin adds the ability to create a dynamic calendar in the first post of a topic to Discourse. Rendering event names can be susce…
Discourse is an open source discussion platform. Prior to 3.2.5 and 3.3.0.beta5, the vulnerability allows an attacker to inject iframes from any doma…
Discourse is an open source discussion platform. Prior to 3.2.5 and 3.3.0.beta5, crafting requests to submit very long tag group names can reduce the…
Discourse is an open source discussion platform. Prior to 3.2.3 and 3.3.0.beta3, improperly sanitized Onebox data could lead to an XSS vulnerability …
Discourse is an open-source discussion platform. Prior to version 3.2.3 on the `stable` branch and version 3.3.0.beta4 on the `beta` and `tests-passe…
Discourse is an open-source discussion platform. Prior to version 3.2.3 on the `stable` branch, version 3.3.0.beta3 on the `beta` branch, and version…
Discourse is an open-source discussion platform. Prior to version 3.2.3 on the `stable` branch and version 3.3.0.beta3 on the `tests-passed` branch, …
Discourse is an open-source discussion platform. Prior to version 3.2.3 on the `stable` branch and version 3.3.0.beta3 on the `tests-passed` branch, …
Discourse is an open source platform for community discussion. In affected versions an attacker can learn that secret categories exist when they have…
Discourse is an open source platform for community discussion. In affected versions users that are allowed to invite others can inject arbitrarily la…
Discourse is an open source platform for community discussion. In affected versions the endpoints for suspending users, silencing users and exporting…
Discourse is an open source platform for community discussion. Without a rate limit on the POST /uploads endpoint, it makes it easier for an attacker…
Discourse is an open source platform for community discussion. In affected versions an attacker can learn that a secret subcategory exists under a pu…
Discourse Calendar adds the ability to create a dynamic calendar in the first post of a topic on the open-source discussion platform Discourse. Prior…
discourse-ai is the AI plugin for the open-source discussion platform Discourse. Prior to commit 94ba0dadc2cf38e8f81c3936974c167219878edd, interactio…
`discourse-microsoft-auth` is a plugin that enables authentication via Microsoft. On sites with the `discourse-microsoft-auth` plugin enabled, an att…
discourse-group-membership-ip-block is a discourse plugin that adds support for adding users to groups based on their IP address. discourse-group-mem…
Discourse is an open-source discussion platform. Improperly sanitized user input could lead to an XSS vulnerability in some situations. This vulnerab…
Discourse is a platform for community discussion. The message serializer uses the full list of expanded chat mentions (@all and @here) which can lead…
Discourse is an open source platform for community discussion. Prior to version 3.1.3 of the `stable` branch and version 3.2.0.beta3 of the `beta` an…
Discourse is an open source platform for community discussion. In versions 3.1.0 through 3.1.2 of the `stable` branch and versions 3.1.0,beta6 throug…
Discourse is an open source platform for community discussion. Prior to version 3.1.3 of the `stable` branch and version 3.2.0.beta3 of the `beta` an…