CVE-2024-24827: No rate limits on POST /uploads endpoint in Discourse

Discourse is an open source platform for community discussion. Without a rate limit on the POST /uploads endpoint, it makes it easier for an attacker to carry out a DoS attack on the server since creating an upload can be a resource intensive process. Do note that the impact varies from site to site as various site settings like maximagesizekb, maxattachmentsizekb and maximagemegapixels will determine the amount of resources used when creating an upload. The issue is patched in the latest stable, beta and tests-passed version of Discourse. Users are advised to upgrade. Users unable to upgrade should reduce maximagesizekb, maxattachmentsizekb and maximagemegapixels as smaller uploads require less resources to process. Alternatively, clientmaxbodysize can be reduced in Nginx to prevent large uploads from reaching the server.