Filter
AND
Versions
2.9.0-beta1
33
2.9.0-beta2
33
2.9.0-beta3
33
2.9.0-beta4
30
2.9.0-beta5
29
2.9.0-beta7
29
2.9.0-beta6
28
2.9.0-beta8
28
2.8.0-beta1
27
2.8.0-beta2
27
2.8.0-beta3
27
2.8.0-beta4
27
3.1.0-beta1
27
2.8.0-beta5
25
2.8.0-beta6
25
2.9.0-beta10
25
2.8.0-beta7
24
2.9.0-beta11
24
2.9.0-beta12
24
2.9.0-beta13
22
2.9.0-beta9
22
2.8.0-beta8
21
2.8.0-beta9
21
2.9.0-beta14
21
2.8.0-beta10
20
3.1.0-beta2
20
3.0.0-beta15
19
2.4.0-beta1
18
2.4.0-beta2
18
1.1.0-beta1
17
1.1.0-beta2
17
1.1.0-beta3
17
1.1.0-beta4
17
1.1.0-beta5
17
1.1.0-beta6
17
1.1.0-beta6b
17
1.1.0-beta7
17
1.1.0-beta8
17
1.2.0-beta1
17
1.2.0-beta2
17
1.2.0-beta3
17
1.2.0-beta4
17
1.2.0-beta5
17
1.2.0-beta6
17
1.2.0-beta7
17
1.2.0-beta8
17
1.2.0-beta9
17
1.3.0-beta1
17
1.3.0-beta10
17
1.3.0-beta11
17
1.3.0-beta2
17
1.3.0-beta3
17
1.3.0-beta4
17
1.3.0-beta5
17
1.3.0-beta6
17
1.3.0-beta7
17
1.3.0-beta8
17
1.3.0-beta9
17
1.4.0-beta1
17
1.4.0-beta10
17
1.4.0-beta11
17
1.4.0-beta12
17
1.4.0-beta2
17
1.4.0-beta3
17
1.4.0-beta4
17
1.4.0-beta5
17
1.4.0-beta6
17
1.4.0-beta7
17
1.4.0-beta8
17
1.4.0-beta9
17
1.5.0-beta1
17
1.5.0-beta10
17
1.5.0-beta11
17
1.5.0-beta12
17
1.5.0-beta13
17
1.5.0-beta13b
17
1.5.0-beta14
17
1.5.0-beta2
17
1.5.0-beta3
17
1.5.0-beta4
17
1.5.0-beta5
17
1.5.0-beta6
17
1.5.0-beta7
17
1.5.0-beta8
17
1.5.0-beta9
17
1.6.0-beta1
17
1.6.0-beta10
17
1.6.0-beta11
17
1.6.0-beta12
17
1.6.0-beta2
17
1.6.0-beta3
17
1.6.0-beta4
17
1.6.0-beta5
17
1.6.0-beta6
17
1.6.0-beta7
17
1.6.0-beta8
17
1.6.0-beta9
17
1.7.0-beta1
17
1.7.0-beta10
17
1.7.0-beta11
17
1.7.0-beta2
17
1.7.0-beta3
17
1.7.0-beta4
17
1.7.0-beta5
17
1.7.0-beta6
17
1.7.0-beta7
17
1.7.0-beta8
17
1.7.0-beta9
17
1.8.0-beta1
17
1.8.0-beta10
17
1.8.0-beta11
17
1.8.0-beta12
17
1.8.0-beta13
17
1.8.0-beta2
17
1.8.0-beta3
17
1.8.0-beta4
17
1.8.0-beta5
17
1.8.0-beta6
17
1.8.0-beta7
17
1.8.0-beta8
17
1.8.0-beta9
17
1.9.0-beta1
17
1.9.0-beta10
17
1.9.0-beta11
17
1.9.0-beta12
17
1.9.0-beta13
17
1.9.0-beta14
17
1.9.0-beta15
17
1.9.0-beta16
17
1.9.0-beta17
17
1.9.0-beta2
17
1.9.0-beta3
17
1.9.0-beta4
17
1.9.0-beta5
17
1.9.0-beta6
17
1.9.0-beta7
17
1.9.0-beta8
17
1.9.0-beta9
17
2.0.0-beta1
17
2.0.0-beta10
17
2.0.0-beta2
17
2.0.0-beta3
17
2.0.0-beta4
17
2.0.0-beta5
17
2.0.0-beta6
17
2.0.0-beta7
17
2.0.0-beta8
17
2.0.0-beta9
17
2.1.0-beta1
17
2.1.0-beta2
17
2.1.0-beta3
17
2.1.0-beta4
17
2.1.0-beta5
17
2.1.0-beta6
17
2.2.0-beta1
17
2.2.0-beta10
17
2.2.0-beta2
17
2.2.0-beta3
17
2.2.0-beta4
17
2.2.0-beta5
17
2.2.0-beta6
17
2.2.0-beta7
17
2.2.0-beta8
17
2.2.0-beta9
17
2.3.0-beta1
17
2.3.0-beta10
17
2.3.0-beta11
17
2.3.0-beta2
17
2.3.0-beta3
17
2.3.0-beta4
17
2.3.0-beta5
17
2.3.0-beta6
17
2.3.0-beta7
17
2.3.0-beta8
17
2.3.0-beta9
17
2.4.0-beta10
17
2.4.0-beta11
17
2.4.0-beta3
17
2.4.0-beta4
17
2.4.0-beta5
17
2.4.0-beta6
17
2.4.0-beta7
17
2.4.0-beta8
17
2.4.0-beta9
17
2.5.0-beta1
17
2.5.0-beta2
17
2.5.0-beta3
17
2.5.0-beta4
17
2.5.0-beta5
17
2.5.0-beta6
17
2.5.0-beta7
17
2.6.0-beta1
17
2.6.0-beta2
17
2.6.0-beta3
17
2.6.0-beta4
17
2.6.0-beta5
17
2.6.0-beta6
17
2.7.0-beta1
17
2.7.0-beta2
17
2.7.0-beta3
17
2.7.0-beta4
17
2.7.0-beta5
17
2.7.0-beta6
17
2.7.0-beta7
17
2.7.0-beta8
17
2.7.0-beta9
17
2.8.0-beta11
17
3.0.0-beta16
15
3.1.0-beta3
14
3.1.0-beta5
10
3.1.0-beta6
8
3.2.0-beta1
8
3.2.0-beta2
6
3.3.0-beta1
6
3.3.0-beta2
6
3.1.0-beta4
4
3.1.0-beta7
4
3.1.0-beta8
4
3.2.0-beta3
3
3.3.0-beta3
3
2.3.2
2
3.0.0
2
3.0.1
2
3.1.1
2
3.4.0
2
3.4.0-beta1
2
2.6.0
1
2.7.12
1
2.7.7
1
2.7.9
1
2.8.11
1
2.8.13
1
2.8.2
1
2.8.4
1
3.0.2
1
3.1.0
1
3.2.0-beta4
1
3.3.0-beta4
1
DiscourseCross-site Scripting (XSS) via topic titles when CSP disabled in Discourse
4.3
First published (updated )
DiscoursePartial denial of service via inline oneboxes in Discourse
4.3
First published (updated )
DiscoursePotential bypass of chat permissions in Discourse
4.3
First published (updated )
DiscourseHTMLi(XSS without CSP) via Onebox urls in Discourse
6.5
First published (updated )
DiscourseStored DOM-based XSS (without CSP) via video placeholders in Discourse
6.5
First published (updated )
Never miss a vulnerability like this again
Sign up to SecAlerts for real-time vulnerability data matched to your software, aggregated from hundreds of sources.
DiscourseBypass of Discourse Connect using other login paths if enabled in Discourse
5.3
First published (updated )
DiscourseMagnific lightbox susceptible to Cross-site Scripting in Discourse
6.8
First published (updated )
DiscourseCross-site Scripting (XSS) via chat excerpts when content security policy (CSP) disabled in Discourse
6.5
First published (updated )
DiscoursePrevent topic list filtering by hidden tags for unauthorized users in Discourse
5.3
First published (updated )
DiscourseDiscourse allows iframe injection though default site setting
6.1
First published (updated )
Never miss a vulnerability like this again
Sign up to SecAlerts for real-time vulnerability data matched to your software, aggregated from hundreds of sources.
DiscourseDenial of service via Watched Words in Discourse
4.9
First published (updated )
DiscourseDiscourse vulnerable to Server-Side Request Forgery via FastImage
6.4
First published (updated )
DiscourseDiscourse doesn't limit reviewable user serializer payload
4.3
First published (updated )
DiscourseDiscourse missing authorization checks for suspending admins/moderators
6.5
First published (updated )
Never miss a vulnerability like this again
Sign up to SecAlerts for real-time vulnerability data matched to your software, aggregated from hundreds of sources.
DiscourseDiscourse vulnerable to stored-dom XSS via Facebook Oneboxes
6.1
First published (updated )
DiscourseDenial of service through invites in Discourse
6.5
EPSS
0.04%
First published (updated )
DiscourseDenial of service via Staff Actions in Discourse
6.5
EPSS
0.04%
First published (updated )
DiscourseDisclosure of the existence of secret categories with custom backgrounds in Discourse
5.3
EPSS
0.04%
First published (updated )
DiscourseDisclosure of the existence of secret subcategories in Discourse
5.3
First published (updated )
Never miss a vulnerability like this again
Sign up to SecAlerts for real-time vulnerability data matched to your software, aggregated from hundreds of sources.
DiscourseNo rate limits on POST /uploads endpoint in Discourse
5.3
EPSS
0.04%
First published (updated )
DiscourseDiscourse improperly sanitized user input leads to XSS
6.3
EPSS
0.05%
First published (updated )
DiscourseDiscourse secure uploads accessible to guests even when login is required
4.3
First published (updated )
DiscourseInsufficient control of custom field value sizes
4.3
EPSS
0.04%
First published (updated )
Never miss a vulnerability like this again
Sign up to SecAlerts for real-time vulnerability data matched to your software, aggregated from hundreds of sources.
DiscourseBypassing height value allowed in some theme components
5.4
First published (updated )
DiscourseDiscourse vulnerable to DoS via Regexp Injection in Full Name
5.4
First published (updated )
DiscoursePrevent unauthorized access to summary details in Discourse
5.3
First published (updated )
DiscourseArbitrary keys can be added to a topic's custom fields by any user in Discourse
4.9
First published (updated )
Never miss a vulnerability like this again
Sign up to SecAlerts for real-time vulnerability data matched to your software, aggregated from hundreds of sources.