Vulnerabilities > Discourse

DATE CVE VULNERABILITY TITLE RISK
2023-11-10 CVE-2023-47121 Server-Side Request Forgery (SSRF) vulnerability in Discourse
Discourse is an open source platform for community discussion.
network
low complexity
discourse CWE-918
critical
9.8
2023-11-10 CVE-2023-45806 Unspecified vulnerability in Discourse
Discourse is an open source platform for community discussion.
network
low complexity
discourse
5.4
2023-11-10 CVE-2023-45816 Information Exposure vulnerability in Discourse
Discourse is an open source platform for community discussion.
local
low complexity
discourse CWE-200
3.3
2023-11-10 CVE-2023-46130 Allocation of Resources Without Limits or Throttling vulnerability in Discourse
Discourse is an open source platform for community discussion.
network
low complexity
discourse CWE-770
5.4
2023-11-10 CVE-2023-47119 Cross-site Scripting vulnerability in Discourse
Discourse is an open source platform for community discussion.
network
low complexity
discourse CWE-79
6.1
2023-10-16 CVE-2023-43658 Cross-site Scripting vulnerability in Discourse Calendar 1.0.0/1.0.1
dicourse-calendar is a plugin for the Discourse messaging platform which adds the ability to create a dynamic calendar in the first post of a topic.
network
low complexity
discourse CWE-79
6.1
2023-10-16 CVE-2023-43659 Cross-site Scripting vulnerability in Discourse 2.6.3/2.6.4/3.2.0
Discourse is an open source platform for community discussion.
network
low complexity
discourse CWE-79
5.4
2023-10-16 CVE-2023-43814 Unspecified vulnerability in Discourse
Discourse is an open source platform for community discussion.
network
high complexity
discourse
3.7
2023-10-16 CVE-2023-44388 Resource Exhaustion vulnerability in Discourse
Discourse is an open source platform for community discussion.
network
low complexity
discourse CWE-400
7.5
2023-10-16 CVE-2023-44391 Unspecified vulnerability in Discourse
Discourse is an open source platform for community discussion.
network
low complexity
discourse
5.3