Skip to content
OpenAdvisories

Archive

10 November 2023

Vulnerabilities first published on this day (UTC), newest first.

2 results · Clear filters · Feed

  • Medium 5.3
    CVE-2023-47119 Public exploit

    HTML injection in oneboxed links

    Discourse is an open source platform for community discussion. Prior to version 3.1.3 of the `stable` branch and version 3.2.0.beta3 of the `beta` and `tests-passed` branches, some links can inject arbitrary HTML tags when rendered through our Onebox engine. …

  • Medium 4.3
    CVE-2023-45806 Public exploit

    Discourse vulnerable to DoS via Regexp Injection in Full Name

    Discourse is an open source platform for community discussion. Prior to version 3.1.3 of the `stable` branch and version 3.2.0.beta3 of the `beta` and `tests-passed` branches, if a user has been quoted and uses a `|` in their full name, they might be able to …