Vulnerabilities > CVE-2020-24327 - Server-Side Request Forgery (SSRF) vulnerability in Discourse 2.3.2/2.6.0
Attack vector
NETWORK Attack complexity
LOW Privileges required
NONE Confidentiality impact
NONE Integrity impact
PARTIAL Availability impact
NONE Summary
Server Side Request Forgery (SSRF) vulnerability exists in Discourse 2.3.2 and 2.6 via the email function. When writing an email in an editor, you can upload pictures of remote websites.
Vulnerable Configurations
| Part | Description | Count |
|---|---|---|
| Application | 2 |