Filter
AND
AND

Discourse DiscourseDiscourse DoS via SvgSprite cache

First published (updated )

Discourse DiscourseDiscourse DoS via remote theme assets

First published (updated )

Discourse DiscourseDiscourse DoS via 2FA and Security Key Names

First published (updated )

Discourse DiscourseDiscourse's restricted tag information visible to unauthenticated users

First published (updated )

Discourse DiscourseDiscourse vulnerable to DoS via defer queue

EPSS
0.04%
First published (updated )

Never miss a vulnerability like this again

Sign up to SecAlerts for real-time vulnerability data matched to your software, aggregated from hundreds of sources.

Discourse DiscourseDiscourse vulnerable to DoS via post edit reason

EPSS
0.04%
First published (updated )

Discourse DiscourseDiscourse CSP nonce reuse vulnerability for anonymous users

First published (updated )

Discourse DiscourseTopic Title Validation Skipped When Changing Category in Discourse

First published (updated )

Discourse DiscourseCSP nonce reuse vulnerability in Discourse

First published (updated )

Discourse DiscourseInfoleak

First published (updated )

Never miss a vulnerability like this again

Sign up to SecAlerts for real-time vulnerability data matched to your software, aggregated from hundreds of sources.

Discourse DiscoursePresence of restricted personal Discourse messages may be leaked if tagged with a tag

First published (updated )

Discourse DiscourseInfoleak

First published (updated )

Discourse DiscourseDiscourse is an open-source discussion platform. Prior to version 3.0.1 on the `stable` branch and 3…

First published (updated )

Discourse DiscourseInfoleak

First published (updated )

Discourse DiscourseDiscourse vulnerable to Cross-site Scripting through tag descriptions

First published (updated )

Never miss a vulnerability like this again

Sign up to SecAlerts for real-time vulnerability data matched to your software, aggregated from hundreds of sources.

Discourse DiscourseDiscourse vulnerable to exposure of user post counts per topic to unauthorized users

First published (updated )

Discourse DiscourseDiscourse vulnerable to private topic leak via email#send_digest

First published (updated )

Discourse DiscourseDiscourse is an option source discussion platform. Prior to version 2.8.14 on the `stable` branch an…

First published (updated )

Discourse DiscourseDiscourse vulnerable to bypass of post max_length using HTML comments

First published (updated )

Discourse DiscourseAny authenticated Discourse user can create an unlisted topic

First published (updated )

Never miss a vulnerability like this again

Sign up to SecAlerts for real-time vulnerability data matched to your software, aggregated from hundreds of sources.

Discourse DiscourseDiscourse may allow exposure of hidden tags in the subject of notification emails

First published (updated )

Discourse DiscourseDiscourse chat messages should have a maximum character limit

First published (updated )

Discourse DiscourseDiscourse users can see notifications for topics they no longer have access to

First published (updated )

Discourse DiscourseUsers erroneously and transparently added to private messages in Discourse

First published (updated )

Discourse DiscourseDisplaying user badges can leak topic titles to users that have no access to the topic

First published (updated )

Never miss a vulnerability like this again

Sign up to SecAlerts for real-time vulnerability data matched to your software, aggregated from hundreds of sources.

Discourse DiscourseDiscourse vulnerable to incomplete quote causing a topic to crash in the browser

First published (updated )

Discourse DiscourseDiscourse user profile location and website fields were not sufficiently length-limited

First published (updated )

Discourse DiscourseCache poisoning via maliciously-formed request in Discourse

First published (updated )

Contact

SecAlerts Pty Ltd.
132 Wickham Terrace
Fortitude Valley,
QLD 4006, Australia
info@secalerts.co
By using SecAlerts services, you agree to our services end-user license agreement. This website is safeguarded by reCAPTCHA and governed by the Google Privacy Policy and Terms of Service. All names, logos, and brands of products are owned by their respective owners, and any usage of these names, logos, and brands for identification purposes only does not imply endorsement. If you possess any content that requires removal, please get in touch with us.
© 2024 SecAlerts Pty Ltd.
ABN: 70 645 966 203, ACN: 645 966 203