discourse vulnerabilities (Bitnami)
287 vulnerabilities.
-
discourseBitnami Discourse: Media uploads remain publicly accessible after category permissions are restricted 7.5 High -
discourseBitnami Discourse: Chat MessageBus delivers read-restricted messages to unauthorized users 7.5 High -
discourseBitnami Discourse: Stored oEmbed HTML injection via allowed iframe 7.7 High -
discourseBitnami Discourse: Encode action_code_who in mention URLs 6.4 Medium -
discourseBitnami Discourse: Chat upload filenames rendered as raw HTML in excerpts 5.0 Medium -
discourseBitnami Discourse: Stored HTML injection in video notification emails 5.4 Medium -
discourseBitnami Discourse: Wildcard iframe origin allowlist bypass via authority separators 4.3 Medium -
discourseBitnami Discourse: Chat MessageBus delivers read-restricted messages to unauthorized users 8.7 High -
discourseBitnami Discourse: Reject literal backslash path separators in iframe src traversal guard 7.2 High -
discourseBitnami Discourse: Escape LIKE metacharacters in upload paths to prevent disclosure 6.5 Medium -
discourseBitnami Discourse: Block post iframes whose encoded userinfo bypasses the allowed_iframes allowlist 5.4 Medium -
discourseBitnami Discourse: Non-participant moderators can read, edit, and delete PM content through Discourse AI reviewables 4.2 Medium -
discourseBitnami Discourse: Stored XSS via unescaped actor name in post actions 5.4 Medium -
discourseBitnami Discourse: Hidden first-post excerpt is emitted in Q&A schema JSON-LD 5.3 Medium -
discourseBitnami Discourse: Shared-draft titles and excerpts leak through group post serialization 4.3 Medium -
discourseBitnami Discourse: Cache poisoning/XSS via color scheme cookies 9.3 Critical -
discourseBitnami Discourse: Review queue exposes flag-related private message excerpts to category group moderators 4.3 Medium -
discourseBitnami Discourse: Templates endpoint exposes hidden tag names 4.3 Medium -
discourseBitnami Discourse: Strip SQL comments and use non-recursive parameter interpolation in Data Explorer 7.1 High -
discourseBitnami Discourse: Stored XSS chat-transcript username unescaped in Rich Text Editor 8.7 High -
discourseBitnami Discourse: Stored XSS in discourse-local-dates plugin 2.0 Low -
discourseBitnami Discourse: Onebox iframe origin allowlist enforces URL authority boundary 6.3 Medium -
discourseBitnami Discourse: Stored XSS in the moderation review queue 4.8 Medium -
discourseBitnami Discourse: Unauthorized eavesdropping on private AI bot conversations. 6.5 Medium -
discourseBitnami Discourse: Stored XSS in staff action logs injects staff UI 5.4 Medium -
discourseBitnami Discourse: Private Chat Threat Message Disclosure via Chat Onebox Channel/Threat ID Mismatch 4.3 Medium -
discourseBitnami Discourse: Anonymous sidebar serialization exposes descriptions of category-restricted tags 5.3 Medium -
discourseBitnami Discourse: Duplicate lookup reveals restricted topic titles through canonicalized URLs 4.3 Medium -
discourseBitnami Discourse: Onebox Domain Blocklist Bypass via Case-Sensitive Comparison 5.3 Medium -
discourseBitnami Discourse: HTML injection in PrettyText.format_for_email from cooked-attribute reparsing 6.4 Medium -
discourseBitnami Discourse: Private event sample invitees are serialized to non-invited event viewers 5.3 Medium -
discourseBitnami Discourse: Stored-XSS in 2FA delete confirmation modal 7.3 High -
discourseBitnami Discourse: Hidden post revisions leak through adjacent visible diffs 5.3 Medium -
discourseBitnami Discourse: Signup-time primary_group_id assignment grants whisperer access 8.2 High -
discourseBitnami Discourse: Insufficient SVG sanitization logic 5.4 Medium -
discourseBitnami Discourse: Topic featured link susceptible to stored XSS 7.4 High -
discourseBitnami Discourse: Secure uploads exposed by hotlinked image copying 6.3 Medium -
discourseBitnami Discourse: Hidden tag names leaked via category serializers 6.3 Medium -
discourseBitnami Discourse: Regular users can route multipart uploads into the admin backup store 6.5 Medium -
discourseBitnami Discourse: Forged AWS SNS bounce notifications can disable a targeted user's email (missing TopicArn binding) 6.5 Medium -
discourseBitnami Discourse: Remote code execution via pdf uploads 7.5 High -
discourseBitnami Discourse: Don't leak restricted tag group names via tag info 5.3 Medium -
discourseBitnami Discourse: Prevent webhook payload disclosure on event redelivery 4.3 Medium -
discourseBitnami Discourse: Cross-site backup access via path traversal in multisite local backups 6.8 Medium -
discourseBitnami Discourse: Chat misauthorization and information disclosure 5.3 Medium -
discourseBitnami Discourse: Hidden reply-to post raw can be disclosed through AI explain prompts 4.3 Medium -
discourseBitnami Discourse: Non-staff group owners can see email password in plaintext through group history 6.5 Medium -
discourseBitnami Discourse: Replying to a whisper lets non-whisperers create staff-only whisper posts 5.4 Medium -
discourseBitnami Discourse: GroupPostSerializer leaks hidden full names through reaction post association 4.3 Medium -
discourseBitnami Discourse: Category queue reviewers can read raw incoming emails from queued posts 4.3 Medium - Show olderLoading…