Discourse ≫ Discourse

188 Schwachstellen gefunden.

Hinweis: Diese Liste kann unvollständig sein. Daten werden ohne Gewähr im Ursprungsformat bereitgestellt.

4.3

CVE-2021-37703

EPSS 0.23%
Veröffentlicht 13.08.2021 16:15:07
Zuletzt bearbeitet 21.11.2024 06:15:44

Discourse is an open-source platform for community discussion. In Discourse before versions 2.7.8 and 2.8.0.beta5, a user's read state for a topic such as the last read post number and the notification level is exposed.

6.1

CVE-2021-37633

EPSS 0.28%
Veröffentlicht 09.08.2021 20:15:07
Zuletzt bearbeitet 21.11.2024 06:15:34

Discourse is an open source discussion platform. In versions prior to 2.7.8 rendering of d-popover tooltips can be susceptible to XSS attacks. This vulnerability only affects sites which have modified or disabled Discourse's default Content Security ...

4.3

CVE-2021-32788

EPSS 0.39%
Veröffentlicht 27.07.2021 22:15:07
Zuletzt bearbeitet 21.11.2024 06:07:44

Discourse is an open source discussion platform. In versions prior to 2.7.7 there are two bugs which led to the post creator of a whisper post being revealed to non-staff users. 1: Staff users that creates a whisper post in a personal message is reve...

5.4

CVE-2021-32764

EPSS 0.24%
Veröffentlicht 15.07.2021 21:15:09
Zuletzt bearbeitet 21.11.2024 06:07:41

Discourse is an open-source discussion platform. In Discourse versions 2.7.5 and prior, parsing and rendering of YouTube Oneboxes can be susceptible to XSS attacks. This vulnerability only affects sites which have modified or disabled Discourse's def...

7.5