Vulnerabilities > Discourse > Discourse > 0.9.2
| DATE | CVE | VULNERABILITY TITLE | RISK |
|---|---|---|---|
| 2021-07-15 | CVE-2021-32764 | Cross-site Scripting vulnerability in Discourse Discourse is an open-source discussion platform. | 3.5 |
| 2021-01-14 | CVE-2021-3138 | Improper Restriction of Excessive Authentication Attempts vulnerability in Discourse In Discourse 2.7.0 through beta1, a rate-limit bypass leads to a bypass of the 2FA requirement for certain forms. | 5.0 |
| 2019-07-29 | CVE-2019-1020018 | Improper Authentication vulnerability in Discourse Discourse before 2.3.0 and 2.4.x before 2.4.0.beta3 lacks a confirmation screen when logging in via an email link. | 7.5 |
| 2019-07-29 | CVE-2019-1020017 | Unspecified vulnerability in Discourse Discourse before 2.3.0 and 2.4.x before 2.4.0.beta3 lacks a confirmation screen when logging in via a user-api OTP. | 5.3 |