Browse CVEs

MEDIUM 5.4 CVE-2023-45806 Discourse is an open source platform for community discussion. Prior to version 3.1.3 of the `stable` branch and version 3.2.0.beta3 of the `beta` an… Discourse 3.1.3 / 3.2.0+ Fix from $1,6002023-11-10 MEDIUM 5.4 CVE-2023-46130 Discourse is an open source platform for community discussion. Prior to version 3.1.3 of the `stable` branch and version 3.2.0.beta3 of the `beta` an… Discourse 3.1.3 / 3.2.0+ Fix from $1,6002023-11-10 HIGH 7.5 CVE-2023-44388 Discourse is an open source platform for community discussion. A malicious request can cause production log files to quickly fill up and thus result … Discourse after 3.1.1 Fix from $1,9502023-10-16 HIGH 7.5 CVE-2023-45131 Discourse is an open source platform for community discussion. New chat messages can be read by making an unauthenticated POST request to MessageBus.… Discourse after 3.1.1 Fix from $1,9502023-10-16 MEDIUM 6.1 CVE-2023-43658 dicourse-calendar is a plugin for the Discourse messaging platform which adds the ability to create a dynamic calendar in the first post of a topic. … Discourse Calendar after 2023-10-16 Fix from $1,6002023-10-16 MEDIUM 5.4 CVE-2023-43659 Discourse is an open source platform for community discussion. Improper escaping of user input allowed for Cross-site Scripting attacks via the diges… Discourse after 3.1.1 Fix from $1,6002023-10-16 MEDIUM 5.3 CVE-2023-44391 Discourse is an open source platform for community discussion. User summaries are accessible for anonymous users even when `hide_user_profiles_from_p… Discourse after 3.1.1 Fix from $1,6002023-10-16 MEDIUM 6.1 CVE-2023-43657 discourse-encrypt is a plugin that provides a secure communication channel through Discourse. Improper escaping of encrypted topic titles could lead … Discourse Encrypt 2023-09-28+ Fix from $1,6002023-09-28 MEDIUM 6.5 CVE-2023-40588 Discourse is an open-source discussion platform. Prior to version 3.1.1 of the `stable` branch and version 3.2.0.beta1 of the `beta` and `tests-passe… Discourse 3.1.1+ Fix from $1,6002023-09-15 MEDIUM 6.5 CVE-2023-41042 Discourse is an open-source discussion platform. Prior to version 3.1.1 of the `stable` branch and version 3.2.0.beta1 of the `beta` and `tests-passe… Discourse 3.1.1+ Fix from $1,6002023-09-15 MEDIUM 6.5 CVE-2023-41043 Discourse is an open-source discussion platform. Prior to version 3.1.1 of the `stable` branch and version 3.2.0.beta1 of the `beta` and `tests-passe… Discourse 3.1.1+ Fix from $1,6002023-09-15 MEDIUM 6.5 CVE-2023-38706 Discourse is an open-source discussion platform. Prior to version 3.1.1 of the `stable` branch and version 3.2.0.beta1 of the `beta` and `tests-passe… Discourse 3.1.0+ Fix from $1,6002023-09-15 HIGH 7.5 CVE-2023-38684 Discourse is an open source discussion platform. Prior to version 3.0.6 of the `stable` branch and version 3.1.0.beta7 of the `beta` and `tests-passe… Discourse 3.0.6+ Fix from $1,9502023-07-28 MEDIUM 6.5 CVE-2023-38498 Discourse is an open source discussion platform. Prior to version 3.0.6 of the `stable` branch and version 3.1.0.beta7 of the `beta` and `tests-passe… Discourse 3.0.6+ Fix from $1,6002023-07-28 MEDIUM 5.4 CVE-2023-37467 Discourse is an open source discussion platform. Prior to version 3.1.0.beta7 of the `beta` and `tests-passed` branches, a CSP (Content Security Poli… Discourse Patch available Fix from $1,6002023-07-28 HIGH 7.5 CVE-2023-36818 Discourse is an open source discussion platform. In affected versions a request to create or update custom sidebar section can cause a denial of serv… Discourse Patch available Fix from $1,9502023-07-14 MEDIUM 6.1 CVE-2023-36473 Discourse is an open source discussion platform. A CSP (Content Security Policy) nonce reuse vulnerability could allow XSS attacks to bypass CSP prot… Discourse 3.0.5+ Fix from $1,6002023-07-13 MEDIUM 5.3 CVE-2023-31142 Discourse is an open source discussion platform. Prior to version 3.0.4 of the `stable` branch and version 3.1.0.beta5 of the `beta` and `tests-passe… Discourse 3.0.4+ Fix from $1,6002023-06-13 MEDIUM 5.3 CVE-2023-32061 Discourse is an open source discussion platform. Prior to version 3.0.4 of the `stable` branch and version 3.1.0.beta5 of the `beta` and `tests-passe… Discourse 3.0.4+ Fix from $1,6002023-06-13 MEDIUM 5.3 CVE-2023-32301 Discourse is an open source discussion platform. Prior to version 3.0.4 of the `stable` branch and version 3.1.0.beta5 of the `beta` and `tests-passe… Discourse 3.0.4+ Fix from $1,6002023-06-13 MEDIUM 5.3 CVE-2023-34250 Discourse is an open source discussion platform. Prior to version 3.0.4 of the `stable` branch and version 3.1.0.beta5 of the `beta` and `tests-passe… Discourse 3.0.4+ Fix from $1,6002023-06-13 MEDIUM 5.3 CVE-2023-30611 Discourse-reactions is a plugin that allows user to add their reactions to the post in the Discourse messaging platform. In affected versions data ab… Reactions Patch available Fix from $1,6002023-04-19 MEDIUM 5.4 CVE-2023-30538 Discourse is an open source platform for community discussion. Due to the improper sanitization of SVG files, an attacker can execute arbitrary JavaS… Discourse 3.1.0+ Fix from $1,6002023-04-18 MEDIUM 6.1 CVE-2023-29196 Discourse is an open source platform for community discussion. This vulnerability is not exploitable on the default install of Discourse. A custom fe… Discourse 3.0.3 / 3.1.0+ Fix from $1,6002023-04-18 HIGH 8.1 CVE-2023-28112 Discourse is an open-source discussion platform. Prior to version 3.1.0.beta3 of the `beta` and `tests-passed` branches, some user provided URLs were… Discourse 3.1.0+ Fix from $1,9502023-03-17 HIGH 7.5 CVE-2023-28111 Discourse is an open-source discussion platform. Prior to version 3.1.0.beta3 of the `beta` and `tests-passed` branches, attackers are able to bypass… Discourse 3.1.0+ Fix from $1,9502023-03-17 MEDIUM 5.4 CVE-2023-25172 Discourse is an open-source discussion platform. Prior to version 3.0.1 of the `stable` branch and version 3.1.0.beta2 of the `beta` and `tests-passe… Discourse 3.0.1 / 3.1.0+ Fix from $1,6002023-03-17 MEDIUM 6.1 CVE-2023-26040 Discourse is an open-source discussion platform. Between versions 3.1.0.beta2 and 3.1.0.beta3 of the `tests-passed` branch, editing or responding to … Discourse Patch available Fix from $1,6002023-03-17 MEDIUM 5.3 CVE-2023-25169 discourse-yearly-review is a discourse plugin which publishes an automated Year in Review topic. In affected versions a user present in a yearly revi… Discourse Yearly Review 0.2+ Fix from $1,6002023-03-06 MEDIUM 5.3 CVE-2023-25819 Discourse is an open source platform for community discussion. Tags that are normally private are showing in metadata. This affects any site running … Discourse 3.1.0+ Fix from $1,6002023-03-04