discourse Vulnerability Advisory Catalog

Total 290 security vulnerabilities recorded for discourse software and firmware.

← Back to All Vendors
Component: discourse

Discourse is a platform for community discussion. A malicious admin could use this vulnerability to perform port enumeration on the local host or othe...

📅 2022-11-02
CVSS 7.6 Dossier →
CVE-2022-39355 CRITICAL
Component: patreon

Discourse Patreon enables syncronization between Discourse Groups and Patreon rewards. On sites with Patreon login enabled, an improper authentication...

📅 2022-10-26
CVSS 9.1 Dossier →
Component: discourse-chat

discourse-chat is a plugin for the Discourse message board which adds chat functionality. In versions prior to 0.9 some places render a chat channel's...

📅 2022-10-06
CVSS 4.3 Dossier →
Component: discotoc

DiscoTOC is a Discourse theme component that generates a table of contents for topics. Users that can create topics in TOC-enabled categories (and hav...

📅 2022-10-06
CVSS 5.4 Dossier →
Component: discourse

Discourse is an open source discussion platform. Starting with version 2.9.0.beta5 and prior to version 2.9.0.beta10, an incomplete quote can generate...

📅 2022-09-29
CVSS 6.5 Dossier →
Component: discourse

Discourse is an open source discussion platform. In versions prior to 2.8.9 on the `stable` branch and prior to 2.9.0.beta10 on the `beta` and `tests-...

📅 2022-09-29
CVSS 4.3 Dossier →
Component: discourse

Discourse is an open source discussion platform. In versions prior to 2.8.9 on the `stable` branch and prior to 2.9.0.beta10 on the `beta` and `tests-...

📅 2022-09-29
CVSS 7.2 Dossier →
CVE-2022-36066 CRITICAL
Component: discourse

Discourse is an open source discussion platform. In versions prior to 2.8.9 on the `stable` branch and prior to 2.9.0.beta10 on the `beta` and `tests-...

📅 2022-09-29
CVSS 9.1 Dossier →
Component: discourse-chat

Discourse-Chat is an asynchronous messaging plugin for the Discourse open-source discussion platform. Users of Discourse Chat can be affected by admin...

📅 2022-09-06
CVSS 5.4 Dossier →
Component: discourse

Discourse through 2.8.7 allows admins to send invitations to arbitrary email addresses at an unlimited rate....

📅 2022-09-02
CVSS 7.2 Dossier →
Component: discourse

Discourse is the an open source discussion platform. In affected versions an email activation route can be abused to send mass spam emails. A fix has ...

📅 2022-08-01
CVSS 6.5 Dossier →
Component: discourse

Discourse is the an open source discussion platform. In affected versions a maliciously crafted request for static assets could cause error responses ...

📅 2022-08-01
CVSS 5.3 Dossier →
Component: discourse

Discourse is an open source discussion platform. Under certain conditions, a logged in user can redeem an invite with an email that either doesn't mat...

📅 2022-06-27
CVSS 5.7 Dossier →
Component: discourse-chat

discourse-chat is a chat plugin for the Discourse application. Versions prior to 0.4 are vulnerable to an exposure of sensitive information, where an ...

📅 2022-06-21
CVSS 4.3 Dossier →
Component: discourse

Discourse is an open-source discussion platform. Prior to version 2.8.4 in the `stable` branch and version `2.9.0.beta5` in the `beta` and `tests-pass...

📅 2022-06-14
CVSS 5.3 Dossier →
Component: discourse_calendar

Discourse Calendar is a calendar plugin for Discourse, an open-source messaging app. Prior to version 1.0.1, parsing and rendering of Event names can ...

📅 2022-06-14
CVSS 6.5 Dossier →
Component: discourse

Discourse is an open source platform for community discussion. Prior to version 2.8.4 on the `stable` branch and 2.9.0beta5 on the `beta` and `tests-p...

📅 2022-06-07
CVSS 2.6 Dossier →
Component: assign

Discourse Assign is a plugin for assigning users to a topic in Discourse, an open-source messaging platform. Prior to version 1.0.1, the UserBookmarkS...

📅 2022-04-26
CVSS 4.3 Dossier →
Component: discourse

Discourse is an open source platform for community discussion. A category's group permissions settings can be viewed by anyone that has access to the ...

📅 2022-04-14
CVSS 5.3 Dossier →
Component: discourse

Discourse is an open source platform for community discussion. In affected versions an attacker can poison the cache for anonymous (i.e. not logged in...

📅 2022-04-14
CVSS 5.3 Dossier →
Component: discourse

Discourse is an open source platform for community discussion. In stable versions prior to 2.8.3 and beta versions prior 2.9.0.beta4 erroneously expos...

📅 2022-04-11
CVSS 5.3 Dossier →
Component: discourse

Discourse is an open source discussion platform. Versions 2.8.2 and prior in the `stable` branch, 2.9.0.beta3 and prior in the `beta` branch, and 2.9....

📅 2022-03-24
CVSS 4.3 Dossier →
Component: discourse

Discourse is an open source discussion platform. In versions prior to 2.8.1 in the `stable` branch, 2.9.0.beta2 in the `beta` branch, and 2.9.0.beta2 ...

📅 2022-02-15
CVSS 6.5 Dossier →
Component: discourse

Discourse is an open source discussion platform. Discourse groups can be configured with varying visibility levels for the group as well as the group ...

📅 2022-01-14
CVSS 4.3 Dossier →
Page 11 of 13 (290 Total Records)