Vulnerabilities > Discourse > Discourse > 2.7.13

DATE CVE VULNERABILITY TITLE RISK
2023-04-18 CVE-2023-30606 Incorrect Permission Assignment for Critical Resource vulnerability in Discourse
Discourse is an open source platform for community discussion.
network
low complexity
discourse CWE-732
4.9
2023-04-18 CVE-2023-28440 Unspecified vulnerability in Discourse
Discourse is an open source platform for community discussion.
network
low complexity
discourse
2.7
2023-03-17 CVE-2023-28112 Server-Side Request Forgery (SSRF) vulnerability in Discourse
Discourse is an open-source discussion platform.
network
low complexity
discourse CWE-918
8.1
2023-03-17 CVE-2023-25172 Cross-site Scripting vulnerability in Discourse
Discourse is an open-source discussion platform.
network
low complexity
discourse CWE-79
5.4
2023-03-17 CVE-2023-28107 Allocation of Resources Without Limits or Throttling vulnerability in Discourse
Discourse is an open-source discussion platform.
network
low complexity
discourse CWE-770
4.9
2023-03-16 CVE-2023-23935 Unspecified vulnerability in Discourse
Discourse is an open-source messaging platform.
network
low complexity
discourse
4.3
2023-03-04 CVE-2023-25819 Information Exposure vulnerability in Discourse
Discourse is an open source platform for community discussion.
network
low complexity
discourse CWE-200
5.3
2023-02-08 CVE-2023-25167 Unspecified vulnerability in Discourse
Discourse is an open source discussion platform.
network
low complexity
discourse
5.7
2023-02-03 CVE-2023-23615 Improper Access Control vulnerability in Discourse
Discourse is an open source discussion platform.
network
low complexity
discourse CWE-284
5.3
2023-01-28 CVE-2023-23616 Resource Exhaustion vulnerability in Discourse
Discourse is an open-source discussion platform.
network
low complexity
discourse CWE-400
4.3