discourse vulnerabilities (Bitnami)
287 vulnerabilities.
discourseBitnamiDiscourse DoS via 2FA and Security Key Names6.5 MediumdiscourseBitnamiDiscourse vulnerable to DoS via drafts6.5 MediumdiscourseBitnamiDiscourse's restricted tag information visible to unauthenticated users4.3 MediumdiscourseBitnamiDiscourse vulnerable to ossible DDoS due to unbounded limits in various controller actions5.3 MediumdiscourseBitnamiDiscourse vulnerable to DoS via defer queue4.3 MediumdiscourseBitnamiDiscourse vulnerable to DoS via post edit reason4.3 MediumdiscourseBitnamiDiscourse Race Condition in Accept Invite2.6 LowdiscourseBitnamiDiscourse CSP nonce reuse vulnerability for anonymous users6.8 MediumdiscourseBitnamiDenial of service via User Custom Sidebar Section Unlimited Link Creation in discourse6.5 MediumdiscourseBitnamiTopic Title Validation Skipped When Changing Category in Discourse3.5 LowdiscourseBitnamiCSP nonce reuse vulnerability in Discourse6.8 MediumdiscourseBitnamiDiscourse vulnerable to exposure of number of topics recently created in private categories4.8 MediumdiscourseBitnamiDiscourse's canonical url not being used for topic embeddings3.1 LowdiscourseBitnamiDiscourse Topic Creation Page Allows iFrame Tag without Restrictions5.4 MediumdiscourseBitnamiDiscourse's general category permissions could be set back to default2.0 LowdiscourseBitnamiMultisite denial of service through unsanitized dynamic dispatch to SiteSetting in Discourse4.2 MediumdiscourseBitnamiStored Cross-site Scripting via improper sanitization of svg files in Discourse5.4 MediumdiscourseBitnamiHTML injection via topic embedding in Discourse4.2 MediumdiscourseBitnamiDenial of service via admin theme import route in Discourse2.7 LowdiscourseBitnamiDiscourse's SSRF protection missing for some FastImage requests5.9 MediumdiscourseBitnamiDiscourse vulnerable to SSRF protection bypass possible with IPv4-mapped IPv6 addresses5.7 MediumdiscourseBitnamiDiscourse vulnerable to multisite DoS by spamming backups4.5 MediumdiscourseBitnamiDiscourse vulnerable to Cross-site Scripting - user name displayed on post4.4 MediumdiscourseBitnamiDiscourse chat messages susceptible to Cross-site Scripting through chat excerpts6.5 MediumdiscourseBitnamiDiscourse: Presence of read restricted topics may be leaked if tagged with a tag that is visible to all users4.3 MediumdiscourseBitnamiPresence of restricted personal Discourse messages may be leaked if tagged with a tag3.5 LowdiscourseBitnamiDiscourse tags with no visibility are leaking into og:article:tag5.3 MediumdiscourseBitnamiRegular expression denial of service via installing themes via git in discourse6.5 MediumdiscourseBitnamiMalicious users in Discourse can create spam topics as any user due to improper access control5.3 MediumdiscourseBitnamiDiscourse's exclude_tags param could leak which topics had a specific hidden tag4.3 MediumdiscourseBitnamiDiscourse vulnerable to ReDoS in user agent parsing8.6 HighdiscourseBitnamiDiscourse vulnerable to Allocation of Resources Without Limits via Chat drafts4.3 MediumdiscourseBitnamiDiscourse restricted tag routes leak topic information5.3 MediumdiscourseBitnamiDiscourse membership requests lack character limit3.5 LowdiscourseBitnamiDiscourse subject to Allocation of Resources Without Limits or Throttling6.5 MediumdiscourseBitnamiDiscourse vulnerable to Cross-site Scripting in local oneboxes8.8 HighdiscourseBitnamiDiscourse vulnerable to Cross-site Scripting through tag descriptions6.8 MediumdiscourseBitnamiDiscourse vulnerable to Cross-site Scripting through pending post titles descriptions8.0 HighdiscourseBitnamiDiscourse vulnerable to exposure of user post counts per topic to unauthorized users5.3 MediumdiscourseBitnamiDiscourse password reset link can lead to in account takeover if user changes to a new email5.7 MediumdiscourseBitnamiDiscourse vulnerable to private topic leak via email#send_digest5.5 MediumdiscourseBitnamiGroup SMTP user emails are exposed in CC email header3.5 LowdiscourseBitnamiDiscourse vulnerable to bypass of post max_length using HTML comments5.7 MediumdiscourseBitnamiDiscourse is an option source discussion platform. Prior to version 2.8.14 on the stable branch and version 2.9.0.beta16 on the beta and tests-passed branches, parsing posts can be susceptible to regu…6.5 MediumdiscourseBitnamiAny authenticated Discourse user can create an unlisted topic4.3 MediumdiscourseBitnamiDiscourse may allow exposure of hidden tags in the subject of notification emails4.3 MediumdiscourseBitnamiDiscourse allows self-XSS through malicious composer message7.1 HighdiscourseBitnamiDiscourse users can see notifications for topics they no longer have access to3.5 LowdiscourseBitnamiDiscourse chat messages should have a maximum character limit3.5 LowdiscourseBitnamiUsers erroneously and transparently added to private messages in Discourse6.5 Medium- Show moreLoading…