Total 290 security vulnerabilities recorded for discourse software and firmware.
Discourse is an open-source discussion platform. Prior to versions `3.3.4` on the `stable` branch and `3.4.0.beta5` on the `beta` branch, in specific ...
Discourse is an open-source discussion platform. Prior to versions `3.3.4` on the `stable` branch and `3.4.0.beta5` on the `beta` branch, someone who ...
Discourse is an open source platform for community discussion. In affected versions users who disable chat in preferences could still be reachable in ...
Discourse is an open source platform for community discussion. In affected versions the endpoint for generating inline oneboxes for URLs wasn't enforc...
Discourse is an open source platform for community discussion. In affected versions with some combinations of plugins, and with CSP disabled, activity...
Discourse is an open source platform for community discussion. In affected versions an attacker can carefully craft a request with the right request h...
Discourse is an open source platform for community discussion. In affected versions an attacker can execute arbitrary JavaScript on users' browsers by...
Discourse is an open source platform for community discussion. In affected versions an attacker can trick a target user to make changes to their own u...
Discourse is an open source platform for community discussion. An attacker can execute arbitrary JavaScript on users' browsers by posting a maliciousl...
Discourse is an open source platform for community discussion. PM titles and metadata can be read by other users when the "PM tags allowed for groups"...
Discourse is an open source platform for community discussion. In affected versions an attacker can make craft an XHR request to poison the anonymous ...
Discourse is an open source platform for community discussion. This vulnerability only impacts Discourse instances configured to use `FileStore::Local...
Discourse is an open source platform for community discussion. Users clicking on the lightbox thumbnails could be affected. This problem is patched in...
Discourse is an open source platform for community discussion. Moderators can see the Screened emails list in the admin dashboard, and through that ca...
Discourse is an open source platform for community discussion. Sites that are using discourse connect but still have local logins enabled could allow ...
Discourse is an open source platform for community discussion. An attacker can make several XHR requests until the cache is poisoned with a response w...
Discourse is an open source platform for community discussion. An attacker can execute arbitrary JavaScript on users' browsers by sending a maliciousl...
Discourse is an open source platform for community discussion. Users can see topics with a hidden tag if they know the label/name of that tag. This is...
Discourse is an open source platform for community discussion. A maliciously crafted email address could allow an attacker to bypass domain-based rest...
Discourse is an open source platform for community discussion. A user can create a post with many replies, and then attempt to fetch them all at once....
Discourse Calendar plugin adds the ability to create a dynamic calendar in the first post of a topic to Discourse. Rendering event names can be suscep...
discourse-calendar is a discourse plugin which adds the ability to create a dynamic calendar in the first post of a topic. The limit on region value l...
Discourse is an open source discussion platform. Prior to 3.2.5 and 3.3.0.beta5, the vulnerability allows an attacker to inject iframes from any domai...
Discourse is an open source discussion platform. Prior to 3.2.5 and 3.3.0.beta5, crafting requests to submit very long tag group names can reduce the ...