Vulnerabilities > Discourse > Discourse > 2.8.5

DATE CVE VULNERABILITY TITLE RISK
2022-09-29 CVE-2022-36066 Unrestricted Upload of File with Dangerous Type vulnerability in Discourse
Discourse is an open source discussion platform.
network
low complexity
discourse CWE-434
7.2
2022-09-29 CVE-2022-36068 Missing Authorization vulnerability in Discourse
Discourse is an open source discussion platform.
network
low complexity
discourse CWE-862
4.3
2022-09-29 CVE-2022-39226 Allocation of Resources Without Limits or Throttling vulnerability in Discourse
Discourse is an open source discussion platform.
network
low complexity
discourse CWE-770
4.3
2022-09-02 CVE-2022-37458 Unspecified vulnerability in Discourse
Discourse through 2.8.7 allows admins to send invitations to arbitrary email addresses at an unlimited rate.
network
low complexity
discourse
7.2