Vulnerabilities > Discourse > Medium

DATE CVE VULNERABILITY TITLE RISK
2023-04-18 CVE-2023-30606 Incorrect Permission Assignment for Critical Resource vulnerability in Discourse
Discourse is an open source platform for community discussion.
network
low complexity
discourse CWE-732
4.9
2023-03-17 CVE-2023-25172 Cross-site Scripting vulnerability in Discourse
Discourse is an open-source discussion platform.
network
low complexity
discourse CWE-79
5.4
2023-03-17 CVE-2023-28107 Allocation of Resources Without Limits or Throttling vulnerability in Discourse
Discourse is an open-source discussion platform.
network
low complexity
discourse CWE-770
4.9
2023-03-17 CVE-2023-23622 Unspecified vulnerability in Discourse
Discourse is an open-source discussion platform.
network
low complexity
discourse
4.3
2023-03-17 CVE-2023-26040 Cross-site Scripting vulnerability in Discourse 3.1.0
Discourse is an open-source discussion platform.
network
low complexity
discourse CWE-79
6.1
2023-03-16 CVE-2023-23935 Unspecified vulnerability in Discourse
Discourse is an open-source messaging platform.
network
low complexity
discourse
4.3
2023-03-06 CVE-2023-25169 Unspecified vulnerability in Discourse Yearly Review 0.1
discourse-yearly-review is a discourse plugin which publishes an automated Year in Review topic.
network
low complexity
discourse
5.3
2023-03-04 CVE-2023-25819 Information Exposure vulnerability in Discourse
Discourse is an open source platform for community discussion.
network
low complexity
discourse CWE-200
5.3
2023-02-08 CVE-2023-25167 Unspecified vulnerability in Discourse
Discourse is an open source discussion platform.
network
low complexity
discourse
5.7
2023-02-03 CVE-2023-23615 Improper Access Control vulnerability in Discourse
Discourse is an open source discussion platform.
network
low complexity
discourse CWE-284
5.3