Exposição de Discourse

Message boards
87
score de exposição
2.279
sites usam
0
em exploração
3
críticos
Análise Vexday

Com 248 CVEs catalogadas e nenhuma entrada no catálogo CISA KEV, o Discourse apresenta taxa de exploração ativa abaixo da média geral do catálogo, o que sugere menor pressão imediata de ameaças confirmadas em produção. O tipo de falha mais recorrente é CWE-200 (exposição indevida de informações), indicando um padrão histórico de problemas relacionados ao controle de acesso a dados. A CVE mais perigosa no momento, CVE-2024-53991, registra EPSS de aproximadamente 0,25, valor que merece atenção dado que reflete probabilidade não trivial de exploração nos próximos 30 dias. O volume de 31 CVEs surgidas nos últimos 90 dias sinaliza cadência ativa de descobertas recentes, recomendando monitoramento contínuo do ciclo de atualização da plataforma.

CVEs

290 resultados
CVE-2026-27454MEDIUMDiscourse has check revision visibility on posts endpointEPSS 1.0%CVE-2021-41271MEDIUMCache poisoning via maliciously-formed request in discourseEPSS 1.0%CVE-2022-24782MEDIUMSecure category names leaked via user activity export in DiscourseEPSS 1.0%CVE-2023-47119MEDIUMHTML injection in oneboxed linksEPSS 0.9%CVE-2026-26077MEDIUMDiscourse doesn't ensure webhooks require a tokenEPSS 0.9%CVE-2022-36068HIGHDiscourse moderators can edit themes via the APIEPSS 0.9%CVE-2023-22739MEDIUMDiscourse subject to Allocation of Resources Without Limits or ThrottlingEPSS 0.9%CVE-2021-32788MEDIUMPost creator of a whisper post can be revealed to non-staff users in DiscourseEPSS 0.9%CVE-2023-23621HIGHDiscourse vulnerable to ReDoS in user agent parsingEPSS 0.9%CVE-2022-24804MEDIUMPrivate group name exposure in discourseEPSS 0.9%CVE-2019-1020017—Discourse before 2.3.0 and 2.4.x before 2.4.0.beta3 lacks a confirmation screen when logging in via a user-api OTP.EPSS 0.9%CVE-2022-21684MEDIUMUser can bypass approval when invited to DiscourseEPSS 0.9%CVE-2021-43792MEDIUMNotifications leak in DiscourseEPSS 0.9%CVE-2021-43850MEDIUMDenial of Service in discourseEPSS 0.9%CVE-2021-37703MEDIUMInformation exposure in DiscourseEPSS 0.8%CVE-2021-37693MEDIUMRe-use of email tokens in DiscourseEPSS 0.8%CVE-2022-21678MEDIUMUser's bio visible even if profile is restricted in DiscourseEPSS 0.8%CVE-2022-31182MEDIUMCache poisoning via maliciously-formed request in DiscourseEPSS 0.8%CVE-2022-23548MEDIUMDiscourse is an option source discussion platform. Prior to version 2.8.14 on the `stable` branch and version 2.9.0.beta16 on the `beta` andEPSS 0.8%CVE-2021-43793MEDIUMBypass of Poll voting limits in DiscourseEPSS 0.8%