Filter
AND
Versions
2.9.0-beta1
10
2.9.0-beta2
10
2.9.0-beta3
10
2.9.0-beta4
10
2.9.0-beta5
10
2.9.0-beta6
10
2.9.0-beta7
10
2.9.0-beta8
9
2.9.0-beta10
8
2.9.0-beta9
8
2.8.0-beta1
7
2.8.0-beta2
7
2.8.0-beta3
7
2.9.0-beta11
6
2.4.0-beta1
5
2.4.0-beta2
5
2.7.0-beta1
5
2.8.0-beta10
5
2.8.0-beta4
5
2.8.0-beta5
5
2.8.0-beta6
5
2.8.0-beta7
5
2.8.0-beta8
5
2.8.0-beta9
5
2.9.0-beta12
5
2.9.0-beta13
5
2.9.0-beta14
5
3.0.0-beta15
5
3.2.0-beta1
5
1.1.0-beta1
4
1.1.0-beta2
4
1.1.0-beta3
4
1.1.0-beta4
4
1.1.0-beta5
4
1.1.0-beta6
4
1.1.0-beta6b
4
1.1.0-beta7
4
1.1.0-beta8
4
1.2.0-beta1
4
1.2.0-beta2
4
1.2.0-beta3
4
1.2.0-beta4
4
1.2.0-beta5
4
1.2.0-beta6
4
1.2.0-beta7
4
1.2.0-beta8
4
1.2.0-beta9
4
1.3.0-beta1
4
1.3.0-beta10
4
1.3.0-beta11
4
1.3.0-beta2
4
1.3.0-beta3
4
1.3.0-beta4
4
1.3.0-beta5
4
1.3.0-beta6
4
1.3.0-beta7
4
1.3.0-beta8
4
1.3.0-beta9
4
1.4.0-beta1
4
1.4.0-beta10
4
1.4.0-beta11
4
1.4.0-beta12
4
1.4.0-beta2
4
1.4.0-beta3
4
1.4.0-beta4
4
1.4.0-beta5
4
1.4.0-beta6
4
1.4.0-beta7
4
1.4.0-beta8
4
1.4.0-beta9
4
1.5.0-beta1
4
1.5.0-beta10
4
1.5.0-beta11
4
1.5.0-beta12
4
1.5.0-beta13
4
1.5.0-beta13b
4
1.5.0-beta14
4
1.5.0-beta2
4
1.5.0-beta3
4
1.5.0-beta4
4
1.5.0-beta5
4
1.5.0-beta6
4
1.5.0-beta7
4
1.5.0-beta8
4
1.5.0-beta9
4
1.6.0-beta1
4
1.6.0-beta10
4
1.6.0-beta11
4
1.6.0-beta12
4
1.6.0-beta2
4
1.6.0-beta3
4
1.6.0-beta4
4
1.6.0-beta5
4
1.6.0-beta6
4
1.6.0-beta7
4
1.6.0-beta8
4
1.6.0-beta9
4
1.7.0-beta1
4
1.7.0-beta10
4
1.7.0-beta11
4
1.7.0-beta2
4
1.7.0-beta3
4
1.7.0-beta4
4
1.7.0-beta5
4
1.7.0-beta6
4
1.7.0-beta7
4
1.7.0-beta8
4
1.7.0-beta9
4
1.8.0-beta1
4
1.8.0-beta10
4
1.8.0-beta11
4
1.8.0-beta12
4
1.8.0-beta13
4
1.8.0-beta2
4
1.8.0-beta3
4
1.8.0-beta4
4
1.8.0-beta5
4
1.8.0-beta6
4
1.8.0-beta7
4
1.8.0-beta8
4
1.8.0-beta9
4
1.9.0-beta1
4
1.9.0-beta10
4
1.9.0-beta11
4
1.9.0-beta12
4
1.9.0-beta13
4
1.9.0-beta14
4
1.9.0-beta15
4
1.9.0-beta16
4
1.9.0-beta17
4
1.9.0-beta2
4
1.9.0-beta3
4
1.9.0-beta4
4
1.9.0-beta5
4
1.9.0-beta6
4
1.9.0-beta7
4
1.9.0-beta8
4
1.9.0-beta9
4
2.0.0-beta1
4
2.0.0-beta10
4
2.0.0-beta2
4
2.0.0-beta3
4
2.0.0-beta4
4
2.0.0-beta5
4
2.0.0-beta6
4
2.0.0-beta7
4
2.0.0-beta8
4
2.0.0-beta9
4
2.1.0-beta1
4
2.1.0-beta2
4
2.1.0-beta3
4
2.1.0-beta4
4
2.1.0-beta5
4
2.1.0-beta6
4
2.2.0-beta1
4
2.2.0-beta10
4
2.2.0-beta2
4
2.2.0-beta3
4
2.2.0-beta4
4
2.2.0-beta5
4
2.2.0-beta6
4
2.2.0-beta7
4
2.2.0-beta8
4
2.2.0-beta9
4
2.3.0-beta1
4
2.3.0-beta10
4
2.3.0-beta11
4
2.3.0-beta2
4
2.3.0-beta3
4
2.3.0-beta4
4
2.3.0-beta5
4
2.3.0-beta6
4
2.3.0-beta7
4
2.3.0-beta8
4
2.3.0-beta9
4
2.4.0-beta10
4
2.4.0-beta11
4
2.4.0-beta3
4
2.4.0-beta4
4
2.4.0-beta5
4
2.4.0-beta6
4
2.4.0-beta7
4
2.4.0-beta8
4
2.4.0-beta9
4
2.5.0-beta1
4
2.5.0-beta2
4
2.5.0-beta3
4
2.5.0-beta4
4
2.5.0-beta5
4
2.5.0-beta6
4
2.5.0-beta7
4
2.6.0-beta1
4
2.6.0-beta2
4
2.6.0-beta3
4
2.6.0-beta4
4
2.6.0-beta5
4
2.6.0-beta6
4
2.7.0-beta2
4
2.7.0-beta3
4
2.7.0-beta4
4
2.7.0-beta5
4
2.7.0-beta6
4
2.7.0-beta7
4
2.7.0-beta8
4
2.7.0-beta9
4
2.8.0-beta11
4
3.1.0-beta1
4
3.1.0-beta2
3
3.1.1
3
3.0.0-beta16
2
3.1.0
2
3.1.0-beta5
2
3.1.0-beta6
2
3.2.0-beta2
2
3.4.0
2
2.6.0
1
2.7.5
1
2.8.10
1
2.8.6
1
2.8.7
1
3.1.0-beta3
1
3.1.0-beta7
1
3.1.0-beta8
1
3.2.0-beta3
1
3.3.0-beta1
1
3.3.0-beta2
1
3.3.0-beta3
1
3.3.0-beta4
1
3.4.0-beta1
1
DiscourseDiscourse is an open source platform for community discussion. In affected versions an attacker can …
8.2
EPSS
0.04%
First published (updated )
DiscourseAnonymous cache poisoning via XHR requests in Discourse
8.2
First published (updated )
DiscoursePotential Backup file leaked via Nginx in Discourse
7.5
First published (updated )
DiscourseAnonymous cache poisoning via XHR requests in Discourse
8.2
First published (updated )
DiscourseDenial of service by the absence of restrictions on replies to posts in Discourse
7.5
First published (updated )
Never miss a vulnerability like this again
Sign up to SecAlerts for real-time vulnerability data matched to your software, aggregated from hundreds of sources.
DiscourseBypass of email address validation via encoded email addresses in Discourse
8.2
First published (updated )
Discourse Aidiscourse-ai admin-initiated SSRF when interacting with AI services
7.2
EPSS
0.04%
First published (updated )
DiscourseDiscourse vulnerable to unlimited mentioned users in message serializer
8.6
First published (updated )
Never miss a vulnerability like this again
Sign up to SecAlerts for real-time vulnerability data matched to your software, aggregated from hundreds of sources.
DiscourseUnauthenticated access to new private chat messages in Discourse
7.5
First published (updated )
DiscourseMalicious requests can fill up the log files resulting in a deinal of service in Discourse
7.5
First published (updated )
DiscourseCross-site Scripting via email preview when CSP disabled in Discourse
8
First published (updated )
DiscourseDiscourse vulnerable to ossible DDoS due to unbounded limits in various controller actions
7.5
First published (updated )
Never miss a vulnerability like this again
Sign up to SecAlerts for real-time vulnerability data matched to your software, aggregated from hundreds of sources.
DiscourseDenial of service via User Custom Sidebar Section Unlimited Link Creation in discourse
7.5
First published (updated )
DiscourseDiscourse is an open-source discussion platform. Prior to version 3.0.1 on the `stable` branch and v…
8.6
First published (updated )
DiscourseDiscourse vulnerable to Cross-site Scripting in local oneboxes
8.8
First published (updated )
Never miss a vulnerability like this again
Sign up to SecAlerts for real-time vulnerability data matched to your software, aggregated from hundreds of sources.
DiscourseDiscourse vulnerable to Cross-site Scripting through pending post titles descriptions
8
First published (updated )
DiscourseDiscourse password reset link can lead to in account takeover if user changes to a new email
8.1
First published (updated )
DiscourseDiscourse allows self-XSS through malicious composer message
7.1
First published (updated )
DiscoursePossible Server-Side Request Forgery (SSRF) in webhooks
7.6
First published (updated )
DiscourseDiscourse user account takeover via email and invite link
8.9
First published (updated )
Never miss a vulnerability like this again
Sign up to SecAlerts for real-time vulnerability data matched to your software, aggregated from hundreds of sources.
DiscourseDiscourse moderators can edit themes via the API
7.2
First published (updated )
DiscourseDiscourse through 2.8.7 allows admins to send invitations to arbitrary email addresses at an unlimit…
7.2
First published (updated )
DiscourseEmail activation route can be abused by spammers in Discourse
7.5
First published (updated )
DiscourseUser can bypass approval when invited to Discourse
8.8
First published (updated )
DiscoursePrivate message title and participating users leaked in discourse
7.5
First published (updated )
Never miss a vulnerability like this again
Sign up to SecAlerts for real-time vulnerability data matched to your software, aggregated from hundreds of sources.