Filter
AND
-Infinity
0
Trending
Versions
2.9.0-beta1
47
2.9.0-beta2
47
2.9.0-beta3
47
2.9.0-beta4
44
2.9.0-beta5
43
2.9.0-beta7
43
2.9.0-beta6
42
2.9.0-beta8
41
2.8.0-beta1
37
2.8.0-beta2
37
2.8.0-beta3
37
2.9.0-beta10
36
2.8.0-beta4
35
2.8.0-beta5
30
2.8.0-beta6
30
2.9.0-beta9
30
2.8.0-beta7
28
3.1.0-beta1
27
2.8.0-beta8
25
2.8.0-beta9
25
2.9.0-beta11
24
1.1.0-beta1
23
1.1.0-beta2
23
1.1.0-beta3
23
1.1.0-beta4
23
1.1.0-beta5
23
1.1.0-beta6
23
1.1.0-beta6b
23
1.1.0-beta7
23
1.1.0-beta8
23
1.2.0-beta1
23
1.2.0-beta2
23
1.2.0-beta3
23
1.2.0-beta4
23
1.2.0-beta5
23
1.2.0-beta6
23
1.2.0-beta7
23
1.2.0-beta8
23
1.2.0-beta9
23
1.3.0-beta1
23
1.3.0-beta10
23
1.3.0-beta11
23
1.3.0-beta2
23
1.3.0-beta3
23
1.3.0-beta4
23
1.3.0-beta5
23
1.3.0-beta6
23
1.3.0-beta7
23
1.3.0-beta8
23
1.3.0-beta9
23
DiscourseRCE via malicious SNS subscription payload
10
First published (updated )
DiscourseDiscourse BBCode plugin vulnerable to arbitrary CSS injection
9.8
First published (updated )
DiscourseDiscourse SSRF vulnerability in Embedding
9.8
First published (updated )
DiscourseCross-site Scripting via Discourse-ai SharedAiConversation onebox in Discourse
9.1
First published (updated )
DiscourseDiscourse vulnerable to RCE via admins uploading maliciously zipped file
9.1
First published (updated )
Never miss a vulnerability like this again
Sign up to SecAlerts for real-time vulnerability data matched to your software, aggregated from hundreds of sources.
DiscourseDiscourse user account takeover via email and invite link
8.9
First published (updated )
DiscourseUser can bypass approval when invited to Discourse
8.8
First published (updated )
DiscourseDiscourse vulnerable to Cross-site Scripting in local oneboxes
8.8
First published (updated )
DiscourseDiscourse vulnerable to unlimited mentioned users in message serializer
8.6
First published (updated )
DiscourseDiscourse vulnerable to ReDoS in user agent parsing
8.6
First published (updated )
Never miss a vulnerability like this again
Sign up to SecAlerts for real-time vulnerability data matched to your software, aggregated from hundreds of sources.
DiscourseBypass of email address validation via encoded email addresses in Discourse
8.2
First published (updated )
DiscourseAnonymous cache poisoning via XHR requests in Discourse
8.2
First published (updated )
DiscourseAnonymous cache poisoning via XHR requests in Discourse
8.2
First published (updated )
DiscourseAnonymous cache poisoning via request headers in Discourse
8.2
EPSS
0.04%
First published (updated )
Never miss a vulnerability like this again
Sign up to SecAlerts for real-time vulnerability data matched to your software, aggregated from hundreds of sources.
DiscourseDiscourse password reset link can lead to in account takeover if user changes to a new email
8.1
First published (updated )
DiscourseDiscourse's SSRF protection missing for some FastImage requests
8.1
First published (updated )
DiscourseCross-site Scripting via email preview when CSP disabled in Discourse
8
First published (updated )
DiscourseDiscourse vulnerable to Cross-site Scripting through pending post titles descriptions
8
First published (updated )
DiscoursePossible Server-Side Request Forgery (SSRF) in webhooks
7.6
First published (updated )
Never miss a vulnerability like this again
Sign up to SecAlerts for real-time vulnerability data matched to your software, aggregated from hundreds of sources.
DiscourseDenial of service by the absence of restrictions on replies to posts in Discourse
7.5
First published (updated )
DiscoursePotential Backup file leaked via Nginx in Discourse
7.5
First published (updated )
DiscourseUnauthenticated access to new private chat messages in Discourse
7.5
First published (updated )
Never miss a vulnerability like this again
Sign up to SecAlerts for real-time vulnerability data matched to your software, aggregated from hundreds of sources.
DiscourseMalicious requests can fill up the log files resulting in a deinal of service in Discourse
7.5
First published (updated )
DiscoursePrivate message title and participating users leaked in discourse
7.5
First published (updated )
DiscourseIn Discourse 2.7.0 through beta1, a rate-limit bypass leads to a bypass of the 2FA requirement for c…
7.5
First published (updated )
DiscourseDenial of service via User Custom Sidebar Section Unlimited Link Creation in discourse
7.5
First published (updated )
Never miss a vulnerability like this again
Sign up to SecAlerts for real-time vulnerability data matched to your software, aggregated from hundreds of sources.