Filter
-Infinity
0
Trending
Software
discourse
156
discourse calendar plugin
7
discourse reactions
3
discourse ai
1
discourse assign
1
discourse code review plugin
1
discourse discourse-encrypt
1
discourse group membership ip blocks
1
discourse mermaid
1
discourse message bus
1
discourse microsoft authentication
1
discourse patreon
1
discourse rails multisite
1
Discourse Code Review PluginDiscourse Code Review Plugin vulnerable to XSS via auto link commits
3.1
First published (updated )
DiscoursePrivate data leak on login-required Discourse sites
5.8
EPSS
0.04%
First published (updated )
DiscourseDiscourse DM limits aren’t always properly enforced
4.8
First published (updated )
DiscourseExposure of whisper participants in discourse
4.3
First published (updated )
DiscourseUser's bio visible even if profile is restricted in Discourse
4.3
First published (updated )
Never miss a vulnerability like this again
Sign up to SecAlerts for real-time vulnerability data matched to your software, aggregated from hundreds of sources.
DiscourseUser can bypass approval when invited to Discourse
8.8
First published (updated )
DiscourseGroup advanced search option may leak group and group's members visibility
5.3
First published (updated )
DiscourseSecure category names leaked via user activity export in Discourse
4.3
First published (updated )
Never miss a vulnerability like this again
Sign up to SecAlerts for real-time vulnerability data matched to your software, aggregated from hundreds of sources.
DiscourseAnonymous user cache poisoning in discourse
5.3
First published (updated )
DiscourseCategory group permissions leaked in Discourse
5.3
First published (updated )
Discourse AssignExposure of Sensitive Information to an Unauthorized Actor in Discourse Assign
4.3
First published (updated )
DiscourseInvite bypasses user approval in Discourse
5.3
First published (updated )
Discourse Calendar pluginDiscourse Calendar Event names susceptible to Cross-site Scripting
6.5
First published (updated )
Never miss a vulnerability like this again
Sign up to SecAlerts for real-time vulnerability data matched to your software, aggregated from hundreds of sources.
DiscourseBanner topic data is exposed on login-required Discourse sites
5.3
First published (updated )
DiscourseExposure of Sensitive Information in discourse-chat
6.5
First published (updated )
DiscourseInvites restricted to an email or invite links restricted to an email domain may be bypassed by a under certain conditions in Discourse
5.7
First published (updated )
DiscourseCache poisoning via maliciously-formed request in Discourse
5.3
First published (updated )
DiscourseEmail activation route can be abused by spammers in Discourse
7.5
First published (updated )
Never miss a vulnerability like this again
Sign up to SecAlerts for real-time vulnerability data matched to your software, aggregated from hundreds of sources.
DiscourseDiscourse-Chat Cross-Site Scripting issue for channel names and descriptions
5.4
First published (updated )
DiscourseDiscourse vulnerable to RCE via admins uploading maliciously zipped file
9.1
First published (updated )
DiscourseDiscourse moderators can edit themes via the API
7.2
First published (updated )
DiscourseDiscourse user profile location and website fields were not sufficiently length-limited
4.3
First published (updated )
DiscourseDiscourse vulnerable to incomplete quote causing a topic to crash in the browser
6.5
First published (updated )
Never miss a vulnerability like this again
Sign up to SecAlerts for real-time vulnerability data matched to your software, aggregated from hundreds of sources.
DiscourseArbitrary HTML injection in table-of-contents theme component in DiscoTOC
5.4
First published (updated )
DiscourseDiscourse-chat plugin susceptible to XSS in channel name and description
5.4
First published (updated )
Discourse PatreonDiscourse Patreon vulnerable to improper validation of email during Patreon authentication
9.8
First published (updated )
DiscoursePossible Server-Side Request Forgery (SSRF) in webhooks
7.6
First published (updated )
DiscourseDiscourse user account takeover via email and invite link
8.9
First published (updated )
Never miss a vulnerability like this again
Sign up to SecAlerts for real-time vulnerability data matched to your software, aggregated from hundreds of sources.