Skip to content
OpenAdvisories

Vendor

Discourse

323 known vulnerabilities.

Products

Discourse 288 discourse-calendar 7 discourse-reactions 4 discourse-chat 3 discourse-ai 2 discourse-doc-categories 1 discourse-placeholder-theme-component 1 discourse-microsoft-auth 1 discourse-yearly-review 1 discourse-footnote 1 discourse-policy 1 discourse-jira 1 discourse-group-membership-ip-block 1 rails_multisite 1 discourse-bbcode 1 DiscoTOC 1 discourse-code-review 1 discourse-patreon 1 message_bus 1 discourse-assign 1 discourse-mermaid-theme-component 1 discourse-encrypt 1 discourse-activity-pub 1 WP Discourse 1
All Critical High Medium Low Exploited only Public exploit

323 results · Feed

  • High 7.4
    CVE-2021-37633

    XSS via d-popover and d-html-popover attribute

    Discourse is an open source discussion platform. In versions prior to 2.7.8 rendering of d-popover tooltips can be susceptible to XSS attacks. This vulnerability only affects sites which have modified or disabled Discourse's default Content Security Policy. T…

    Discourse Discourse
  • Medium 4.3
    CVE-2021-32788

    Post creator of a whisper post can be revealed to non-staff users in Discourse

    Discourse is an open source discussion platform. In versions prior to 2.7.7 there are two bugs which led to the post creator of a whisper post being revealed to non-staff users. 1: Staff users that creates a whisper post in a personal message is revealed to n…

    Discourse Discourse
  • High 8.1
    CVE-2021-32764

    YouTube Onebox susceptible to XSS

    Discourse is an open-source discussion platform. In Discourse versions 2.7.5 and prior, parsing and rendering of YouTube Oneboxes can be susceptible to XSS attacks. This vulnerability only affects sites which have modified or disabled Discourse's default Cont…

    Discourse Discourse