Vulnerability index

Browse CVEs

207 matching
Filters 1 Clear all
Severity

Filters apply as you choose them.

Discourse MEDIUM 5.4
CVE-2023-45806

Discourse is an open source platform for community discussion. Prior to version 3.1.3 of the `stable` branch and version 3.2.0.beta3 of the `beta` an…

Fix: 3.1.3 / 3.2.0+
Fix from $1,600 2023-11-10
Discourse MEDIUM 5.4
CVE-2023-46130

Discourse is an open source platform for community discussion. Prior to version 3.1.3 of the `stable` branch and version 3.2.0.beta3 of the `beta` an…

Fix: 3.1.3 / 3.2.0+
Fix from $1,600 2023-11-10
Discourse HIGH 7.5
CVE-2023-44388

Discourse is an open source platform for community discussion. A malicious request can cause production log files to quickly fill up and thus result …

Fix: after 3.1.1
Fix from $1,950 2023-10-16
Discourse HIGH 7.5
CVE-2023-45131

Discourse is an open source platform for community discussion. New chat messages can be read by making an unauthenticated POST request to MessageBus.…

Fix: after 3.1.1
Fix from $1,950 2023-10-16
Discourse Calendar MEDIUM 6.1
CVE-2023-43658

dicourse-calendar is a plugin for the Discourse messaging platform which adds the ability to create a dynamic calendar in the first post of a topic. …

Fix: after 2023-10-16
Fix from $1,600 2023-10-16
Discourse MEDIUM 5.4
CVE-2023-43659

Discourse is an open source platform for community discussion. Improper escaping of user input allowed for Cross-site Scripting attacks via the diges…

Fix: after 3.1.1
Fix from $1,600 2023-10-16
Discourse MEDIUM 5.3
CVE-2023-44391

Discourse is an open source platform for community discussion. User summaries are accessible for anonymous users even when `hide_user_profiles_from_p…

Fix: after 3.1.1
Fix from $1,600 2023-10-16
Discourse Encrypt MEDIUM 6.1
CVE-2023-43657

discourse-encrypt is a plugin that provides a secure communication channel through Discourse. Improper escaping of encrypted topic titles could lead …

Fix: 2023-09-28+
Fix from $1,600 2023-09-28
Discourse MEDIUM 6.5
CVE-2023-40588

Discourse is an open-source discussion platform. Prior to version 3.1.1 of the `stable` branch and version 3.2.0.beta1 of the `beta` and `tests-passe…

Fix: 3.1.1+
Fix from $1,600 2023-09-15
Discourse MEDIUM 6.5
CVE-2023-41042

Discourse is an open-source discussion platform. Prior to version 3.1.1 of the `stable` branch and version 3.2.0.beta1 of the `beta` and `tests-passe…

Fix: 3.1.1+
Fix from $1,600 2023-09-15
Discourse MEDIUM 6.5
CVE-2023-41043

Discourse is an open-source discussion platform. Prior to version 3.1.1 of the `stable` branch and version 3.2.0.beta1 of the `beta` and `tests-passe…

Fix: 3.1.1+
Fix from $1,600 2023-09-15
Discourse MEDIUM 6.5
CVE-2023-38706

Discourse is an open-source discussion platform. Prior to version 3.1.1 of the `stable` branch and version 3.2.0.beta1 of the `beta` and `tests-passe…

Fix: 3.1.0+
Fix from $1,600 2023-09-15
Discourse HIGH 7.5
CVE-2023-38684

Discourse is an open source discussion platform. Prior to version 3.0.6 of the `stable` branch and version 3.1.0.beta7 of the `beta` and `tests-passe…

Fix: 3.0.6+
Fix from $1,950 2023-07-28
Discourse MEDIUM 6.5
CVE-2023-38498

Discourse is an open source discussion platform. Prior to version 3.0.6 of the `stable` branch and version 3.1.0.beta7 of the `beta` and `tests-passe…

Fix: 3.0.6+
Fix from $1,600 2023-07-28
Discourse MEDIUM 5.4
CVE-2023-37467

Discourse is an open source discussion platform. Prior to version 3.1.0.beta7 of the `beta` and `tests-passed` branches, a CSP (Content Security Poli…

Patch available
Fix from $1,600 2023-07-28
Discourse HIGH 7.5
CVE-2023-36818

Discourse is an open source discussion platform. In affected versions a request to create or update custom sidebar section can cause a denial of serv…

Patch available
Fix from $1,950 2023-07-14
Discourse MEDIUM 6.1
CVE-2023-36473

Discourse is an open source discussion platform. A CSP (Content Security Policy) nonce reuse vulnerability could allow XSS attacks to bypass CSP prot…

Fix: 3.0.5+
Fix from $1,600 2023-07-13
Discourse MEDIUM 5.3
CVE-2023-31142

Discourse is an open source discussion platform. Prior to version 3.0.4 of the `stable` branch and version 3.1.0.beta5 of the `beta` and `tests-passe…

Fix: 3.0.4+
Fix from $1,600 2023-06-13
Discourse MEDIUM 5.3
CVE-2023-32061

Discourse is an open source discussion platform. Prior to version 3.0.4 of the `stable` branch and version 3.1.0.beta5 of the `beta` and `tests-passe…

Fix: 3.0.4+
Fix from $1,600 2023-06-13
Discourse MEDIUM 5.3
CVE-2023-32301

Discourse is an open source discussion platform. Prior to version 3.0.4 of the `stable` branch and version 3.1.0.beta5 of the `beta` and `tests-passe…

Fix: 3.0.4+
Fix from $1,600 2023-06-13
Discourse MEDIUM 5.3
CVE-2023-34250

Discourse is an open source discussion platform. Prior to version 3.0.4 of the `stable` branch and version 3.1.0.beta5 of the `beta` and `tests-passe…

Fix: 3.0.4+
Fix from $1,600 2023-06-13
Reactions MEDIUM 5.3
CVE-2023-30611

Discourse-reactions is a plugin that allows user to add their reactions to the post in the Discourse messaging platform. In affected versions data ab…

Patch available
Fix from $1,600 2023-04-19
Discourse MEDIUM 5.4
CVE-2023-30538

Discourse is an open source platform for community discussion. Due to the improper sanitization of SVG files, an attacker can execute arbitrary JavaS…

Fix: 3.1.0+
Fix from $1,600 2023-04-18
Discourse MEDIUM 6.1
CVE-2023-29196

Discourse is an open source platform for community discussion. This vulnerability is not exploitable on the default install of Discourse. A custom fe…

Fix: 3.0.3 / 3.1.0+
Fix from $1,600 2023-04-18
Discourse HIGH 8.1
CVE-2023-28112

Discourse is an open-source discussion platform. Prior to version 3.1.0.beta3 of the `beta` and `tests-passed` branches, some user provided URLs were…

Fix: 3.1.0+
Fix from $1,950 2023-03-17
Discourse HIGH 7.5
CVE-2023-28111

Discourse is an open-source discussion platform. Prior to version 3.1.0.beta3 of the `beta` and `tests-passed` branches, attackers are able to bypass…

Fix: 3.1.0+
Fix from $1,950 2023-03-17
Discourse MEDIUM 5.4
CVE-2023-25172

Discourse is an open-source discussion platform. Prior to version 3.0.1 of the `stable` branch and version 3.1.0.beta2 of the `beta` and `tests-passe…

Fix: 3.0.1 / 3.1.0+
Fix from $1,600 2023-03-17
Discourse MEDIUM 6.1
CVE-2023-26040

Discourse is an open-source discussion platform. Between versions 3.1.0.beta2 and 3.1.0.beta3 of the `tests-passed` branch, editing or responding to …

Patch available
Fix from $1,600 2023-03-17
Discourse Yearly Review MEDIUM 5.3
CVE-2023-25169

discourse-yearly-review is a discourse plugin which publishes an automated Year in Review topic. In affected versions a user present in a yearly revi…

Fix: 0.2+
Fix from $1,600 2023-03-06
Discourse MEDIUM 5.3
CVE-2023-25819

Discourse is an open source platform for community discussion. Tags that are normally private are showing in metadata. This affects any site running …

Fix: 3.1.0+
Fix from $1,600 2023-03-04