Filter
AND

Versions

2.9.0-beta1
45
2.9.0-beta2
45
2.9.0-beta3
45
2.9.0-beta4
42
2.9.0-beta5
41
2.9.0-beta7
41
2.9.0-beta6
40
2.9.0-beta8
39
2.8.0-beta1
35
2.8.0-beta2
35
2.8.0-beta3
35
2.9.0-beta10
34
2.8.0-beta4
33
2.8.0-beta5
31
2.8.0-beta6
31
2.9.0-beta11
31
2.9.0-beta9
31
3.1.0-beta1
31
2.9.0-beta12
30
2.8.0-beta7
29
2.9.0-beta13
28
2.9.0-beta14
27
2.8.0-beta8
26
2.8.0-beta9
26
2.8.0-beta10
25
3.0.0-beta15
25
3.1.0-beta2
25
2.4.0-beta1
23
2.4.0-beta2
23
2.7.0-beta1
22
1.1.0-beta1
21
1.1.0-beta2
21
1.1.0-beta3
21
1.1.0-beta4
21
1.1.0-beta5
21
1.1.0-beta6
21
1.1.0-beta6b
21
1.1.0-beta7
21
1.1.0-beta8
21
1.2.0-beta1
21
1.2.0-beta2
21
1.2.0-beta3
21
1.2.0-beta4
21
1.2.0-beta5
21
1.2.0-beta6
21
1.2.0-beta7
21
1.2.0-beta8
21
1.2.0-beta9
21
1.3.0-beta1
21
1.3.0-beta10
21
1.3.0-beta11
21
1.3.0-beta2
21
1.3.0-beta3
21
1.3.0-beta4
21
1.3.0-beta5
21
1.3.0-beta6
21
1.3.0-beta7
21
1.3.0-beta8
21
1.3.0-beta9
21
1.4.0-beta1
21
1.4.0-beta10
21
1.4.0-beta11
21
1.4.0-beta12
21
1.4.0-beta2
21
1.4.0-beta3
21
1.4.0-beta4
21
1.4.0-beta5
21
1.4.0-beta6
21
1.4.0-beta7
21
1.4.0-beta8
21
1.4.0-beta9
21
1.5.0-beta1
21
1.5.0-beta10
21
1.5.0-beta11
21
1.5.0-beta12
21
1.5.0-beta13
21
1.5.0-beta13b
21
1.5.0-beta14
21
1.5.0-beta2
21
1.5.0-beta3
21
1.5.0-beta4
21
1.5.0-beta5
21
1.5.0-beta6
21
1.5.0-beta7
21
1.5.0-beta8
21
1.5.0-beta9
21
1.6.0-beta1
21
1.6.0-beta10
21
1.6.0-beta11
21
1.6.0-beta12
21
1.6.0-beta2
21
1.6.0-beta3
21
1.6.0-beta4
21
1.6.0-beta5
21
1.6.0-beta6
21
1.6.0-beta7
21
1.6.0-beta8
21
1.6.0-beta9
21
1.7.0-beta1
21
1.7.0-beta10
21
1.7.0-beta11
21
1.7.0-beta2
21
1.7.0-beta3
21
1.7.0-beta4
21
1.7.0-beta5
21
1.7.0-beta6
21
1.7.0-beta7
21
1.7.0-beta8
21
1.7.0-beta9
21
1.8.0-beta1
21
1.8.0-beta10
21
1.8.0-beta11
21
1.8.0-beta12
21
1.8.0-beta13
21
1.8.0-beta2
21
1.8.0-beta3
21
1.8.0-beta4
21
1.8.0-beta5
21
1.8.0-beta6
21
1.8.0-beta7
21
1.8.0-beta8
21
1.8.0-beta9
21
1.9.0-beta1
21
1.9.0-beta10
21
1.9.0-beta11
21
1.9.0-beta12
21
1.9.0-beta13
21
1.9.0-beta14
21
1.9.0-beta15
21
1.9.0-beta16
21
1.9.0-beta17
21
1.9.0-beta2
21
1.9.0-beta3
21
1.9.0-beta4
21
1.9.0-beta5
21
1.9.0-beta6
21
1.9.0-beta7
21
1.9.0-beta8
21
1.9.0-beta9
21
2.0.0-beta1
21
2.0.0-beta10
21
2.0.0-beta2
21
2.0.0-beta3
21
2.0.0-beta4
21
2.0.0-beta5
21
2.0.0-beta6
21
2.0.0-beta7
21
2.0.0-beta8
21
2.0.0-beta9
21
2.1.0-beta1
21
2.1.0-beta2
21
2.1.0-beta3
21
2.1.0-beta4
21
2.1.0-beta5
21
2.1.0-beta6
21
2.2.0-beta1
21
2.2.0-beta10
21
2.2.0-beta2
21
2.2.0-beta3
21
2.2.0-beta4
21
2.2.0-beta5
21
2.2.0-beta6
21
2.2.0-beta7
21
2.2.0-beta8
21
2.2.0-beta9
21
2.3.0-beta1
21
2.3.0-beta10
21
2.3.0-beta11
21
2.3.0-beta2
21
2.3.0-beta3
21
2.3.0-beta4
21
2.3.0-beta5
21
2.3.0-beta6
21
2.3.0-beta7
21
2.3.0-beta8
21
2.3.0-beta9
21
2.4.0-beta10
21
2.4.0-beta11
21
2.4.0-beta3
21
2.4.0-beta4
21
2.4.0-beta5
21
2.4.0-beta6
21
2.4.0-beta7
21
2.4.0-beta8
21
2.4.0-beta9
21
2.5.0-beta1
21
2.5.0-beta2
21
2.5.0-beta3
21
2.5.0-beta4
21
2.5.0-beta5
21
2.5.0-beta6
21
2.5.0-beta7
21
2.6.0-beta1
21
2.6.0-beta2
21
2.6.0-beta3
21
2.6.0-beta4
21
2.6.0-beta5
21
2.6.0-beta6
21
2.7.0-beta2
21
2.7.0-beta3
21
2.7.0-beta4
21
2.7.0-beta5
21
2.7.0-beta6
21
2.7.0-beta7
21
2.7.0-beta8
21
2.7.0-beta9
21
2.8.0-beta11
21
3.0.0-beta16
17
3.1.0-beta3
17
3.2.0-beta1
16
3.1.0-beta5
13
3.1.0-beta6
11
3.2.0-beta2
10
3.3.0-beta1
7
3.3.0-beta2
7
3.1.1
6
3.1.0-beta7
5
3.1.0-beta8
5
3.1.0-beta4
4
3.2.0-beta3
4
3.3.0-beta3
4
3.4.0
4
3.1.0
3
3.4.0-beta1
3
2.3.2
2
2.6.0
2
3.0.1
2
3.3.0-beta4
2
2.7.12
1
2.7.5
1
2.7.7
1
2.7.9
1
2.8.10
1
2.8.11
1
2.8.13
1
2.8.2
1
2.8.4
1
2.8.6
1
2.8.7
1
3.0.2
1
3.2.0-beta4
1

CVE-2023-47119HTML injection in oneboxed links

First published (updated )

CVE-2023-47121Discourse SSRF vulnerability in Embedding

First published (updated )

CVE-2023-47120Discourse DoS through Onebox favicon URL

7.5
First published (updated )

CVE-2023-46130Bypassing height value allowed in some theme components

First published (updated )

CVE-2023-45816Unread bookmark reminder notifications that the user cannot access can be seen

3.3
First published (updated )

Never miss a vulnerability like this again

Sign up to SecAlerts for real-time vulnerability data matched to your software, aggregated from hundreds of sources.

CVE-2023-45806Discourse vulnerable to DoS via Regexp Injection in Full Name

First published (updated )

Discourse DiscourseDiscourse vulnerable to Cross-site Scripting through pending post titles descriptions

First published (updated )

Discourse DiscourseDiscourse vulnerable to Cross-site Scripting through tag descriptions

First published (updated )

Discourse DiscourseDiscourse vulnerable to exposure of user post counts per topic to unauthorized users

First published (updated )

Discourse DiscourseDiscourse password reset link can lead to in account takeover if user changes to a new email

8.1
First published (updated )

Never miss a vulnerability like this again

Sign up to SecAlerts for real-time vulnerability data matched to your software, aggregated from hundreds of sources.

Discourse DiscourseGroup SMTP user emails are exposed in CC email header

3.5
First published (updated )

Discourse DiscourseAny authenticated Discourse user can create an unlisted topic

First published (updated )

Discourse DiscourseDiscourse may allow exposure of hidden tags in the subject of notification emails

First published (updated )

Discourse DiscourseDiscourse allows self-XSS through malicious composer message

7.1
First published (updated )

Discourse DiscourseExposure of whisper participants in discourse

First published (updated )

Never miss a vulnerability like this again

Sign up to SecAlerts for real-time vulnerability data matched to your software, aggregated from hundreds of sources.

Discourse DiscourseDenial of Service in discourse

First published (updated )

Discourse DiscourseBypass of Poll voting limits in Discourse

First published (updated )

Discourse DiscourseAnonymous user cache poisoning via development-mode header in Discourse

First published (updated )

Discourse DiscourseNotifications leak in Discourse

First published (updated )

Discourse DiscourseCache poisoning via maliciously-formed request in discourse

First published (updated )

Never miss a vulnerability like this again

Sign up to SecAlerts for real-time vulnerability data matched to your software, aggregated from hundreds of sources.

Discourse DiscourseRCE via malicious SNS subscription payload

First published (updated )

Discourse DiscourseTopic Title Validation Skipped When Changing Category in Discourse

First published (updated )

Discourse DiscourseCSP nonce reuse vulnerability in Discourse

First published (updated )

Discourse DiscourseDenial of service by the absence of restrictions on replies to posts in Discourse

7.5
First published (updated )

Discourse DiscourseBypass of email address validation via encoded email addresses in Discourse

8.2
First published (updated )

Never miss a vulnerability like this again

Sign up to SecAlerts for real-time vulnerability data matched to your software, aggregated from hundreds of sources.

Discourse DiscoursePrevent topic list filtering by hidden tags for unauthorized users in Discourse

First published (updated )

Discourse DiscourseCross-site Scripting (XSS) via chat excerpts when content security policy (CSP) disabled in Discourse

First published (updated )

Discourse DiscourseDenial of service via User Custom Sidebar Section Unlimited Link Creation in discourse

7.5
First published (updated )

Discourse DiscourseDiscourse improperly sanitized user input leads to XSS

EPSS
0.05%
First published (updated )

Discourse DiscourseDiscourse CSP nonce reuse vulnerability for anonymous users

First published (updated )

Never miss a vulnerability like this again

Sign up to SecAlerts for real-time vulnerability data matched to your software, aggregated from hundreds of sources.

Contact

SecAlerts Pty Ltd.
132 Wickham Terrace
Fortitude Valley,
QLD 4006, Australia
info@secalerts.co
By using SecAlerts services, you agree to our services end-user license agreement. This website is safeguarded by reCAPTCHA and governed by the Google Privacy Policy and Terms of Service. All names, logos, and brands of products are owned by their respective owners, and any usage of these names, logos, and brands for identification purposes only does not imply endorsement. If you possess any content that requires removal, please get in touch with us.
© 2024 SecAlerts Pty Ltd.
ABN: 70 645 966 203, ACN: 645 966 203