Exposición de Discourse

Message boards
87
score de exposición
2279
sitios usan
0
en explotación
3
críticos

CVEs

290 resultados
CVE-2024-53991HIGHPotential Backup file leaked via Nginx in DiscourseEPSS 29.9%CVE-2021-41163CRITICALRCE via malicious SNS subscription payloadEPSS 19.8%CVE-2023-45131HIGHUnauthenticated access to new private chat messages in DiscourseEPSS 4.0%CVE-2026-28227LOWDiscourse Vulnerable to Unauthorized Topic Creation in Staff-Only Categories via Topic Timer publish_to_categoryEPSS 3.3%CVE-2022-36066CRITICALDiscourse vulnerable to RCE via admins uploading maliciously zipped fileEPSS 2.1%CVE-2024-47773HIGHAnonymous cache poisoning via XHR requests in DiscourseEPSS 1.8%CVE-2021-41082HIGHPrivate message title and participating users leaked in discourseEPSS 1.8%CVE-2026-26265HIGHDiscourse has IDOR vulnerability in the directory items endpointEPSS 1.3%CVE-2022-39232MEDIUMDiscourse vulnerable to incomplete quote causing a topic to crash in the browserEPSS 1.2%CVE-2026-27934HIGHDiscourse leaks private topic title and post excerpt via user action API endpointEPSS 1.2%CVE-2022-21677MEDIUMGroup advanced search option may leak group and group's members visibility EPSS 1.2%CVE-2022-23641MEDIUMDenial of Service in DiscourseEPSS 1.2%CVE-2022-31060MEDIUMBanner topic data is exposed on login-required Discourse sitesEPSS 1.1%CVE-2019-1020018—Discourse before 2.3.0 and 2.4.x before 2.4.0.beta3 lacks a confirmation screen when logging in via an email link.EPSS 1.1%CVE-2021-43794MEDIUMAnonymous user cache poisoning via development-mode header in DiscourseEPSS 1.1%CVE-2022-39226MEDIUMDiscourse user profile location and website fields were not sufficiently length-limitedEPSS 1.0%CVE-2022-24824MEDIUMAnonymous user cache poisoning in discourseEPSS 1.0%CVE-2022-31025LOWInvite bypasses user approval in DiscourseEPSS 1.0%CVE-2023-45806MEDIUMDiscourse vulnerable to DoS via Regexp Injection in Full NameEPSS 1.0%CVE-2023-47120HIGHDiscourse DoS through Onebox favicon URLEPSS 1.0%