Lucene search
+L

CVE-2023-36473

🗓️ 13 Jul 2023 20:57:50Reported by GitHub_MType 
cve
 cve
🔗 web.nvd.nist.gov👁 71 Views

Discourse open source discussion platform. CSP nonce reuse vuln allows XSS bypass CSP protection. Patched in latest branches

Related
Detection
Affected
Refs
ReporterTitlePublishedViews
Family
circl
Circl
CVE-2023-36473
14 Jul 202300:11
circl
cnnvd
CNNVD
Discourse 跨站脚本漏洞
13 Jul 202300:00
cnnvd
cnvd
CNVD
Discourse cross-site scripting vulnerability (CNVD-2023-60471)
17 Jul 202300:00
cnvd
cvelist
Cvelist
CVE-2023-36473 CSP nonce reuse vulnerability in Discourse
13 Jul 202320:57
cvelist
euvd
EUVD
EUVD-2023-40428
3 Oct 202520:07
euvd
nvd
NVD
CVE-2023-36473
13 Jul 202321:15
nvd
openvas
OpenVAS
Discourse < 3.0.5 Multiple Vulnerabilities
14 Jul 202300:00
openvas
openvas
OpenVAS
Discourse 3.1.x < 3.1.0.beta6 Multiple Vulnerabilities
14 Jul 202300:00
openvas
osv
OSV
BIT-DISCOURSE-2023-36473 CSP nonce reuse vulnerability in Discourse
6 Mar 202410:56
osv
prion
Prion
Design/Logic Flaw
13 Jul 202321:15
prion
Rows per page
NVD
Vulners
Node
OR
discoursediscourseRange<3.0.5stable
discoursediscourseMatch1.1.0beta1beta
discoursediscourseMatch1.1.0beta2beta
discoursediscourseMatch1.1.0beta3beta
discoursediscourseMatch1.1.0beta4beta
discoursediscourseMatch1.1.0beta5beta
discoursediscourseMatch1.1.0beta6beta
discoursediscourseMatch1.1.0beta6bbeta
discoursediscourseMatch1.1.0beta7beta
discoursediscourseMatch1.1.0beta8beta
discoursediscourseMatch1.2.0beta1beta
discoursediscourseMatch1.2.0beta2beta
discoursediscourseMatch1.2.0beta3beta
discoursediscourseMatch1.2.0beta4beta
discoursediscourseMatch1.2.0beta5beta
discoursediscourseMatch1.2.0beta6beta
discoursediscourseMatch1.2.0beta7beta
discoursediscourseMatch1.2.0beta8beta
discoursediscourseMatch1.2.0beta9beta
discoursediscourseMatch1.3.0beta1beta
discoursediscourseMatch1.3.0beta10beta
discoursediscourseMatch1.3.0beta11beta
discoursediscourseMatch1.3.0beta2beta
discoursediscourseMatch1.3.0beta3beta
discoursediscourseMatch1.3.0beta4beta
discoursediscourseMatch1.3.0beta5beta
discoursediscourseMatch1.3.0beta6beta
discoursediscourseMatch1.3.0beta7beta
discoursediscourseMatch1.3.0beta8beta
discoursediscourseMatch1.3.0beta9beta
discoursediscourseMatch1.4.0beta1beta
discoursediscourseMatch1.4.0beta10beta
discoursediscourseMatch1.4.0beta11beta
discoursediscourseMatch1.4.0beta12beta
discoursediscourseMatch1.4.0beta2beta
discoursediscourseMatch1.4.0beta3beta
discoursediscourseMatch1.4.0beta4beta
discoursediscourseMatch1.4.0beta5beta
discoursediscourseMatch1.4.0beta6beta
discoursediscourseMatch1.4.0beta7beta
discoursediscourseMatch1.4.0beta8beta
discoursediscourseMatch1.4.0beta9beta
discoursediscourseMatch1.5.0beta1beta
discoursediscourseMatch1.5.0beta10beta
discoursediscourseMatch1.5.0beta11beta
discoursediscourseMatch1.5.0beta12beta
discoursediscourseMatch1.5.0beta13beta
discoursediscourseMatch1.5.0beta13bbeta
discoursediscourseMatch1.5.0beta14beta
discoursediscourseMatch1.5.0beta2beta
discoursediscourseMatch1.5.0beta3beta
discoursediscourseMatch1.5.0beta4beta
discoursediscourseMatch1.5.0beta5beta
discoursediscourseMatch1.5.0beta6beta
discoursediscourseMatch1.5.0beta7beta
discoursediscourseMatch1.5.0beta8beta
discoursediscourseMatch1.5.0beta9beta
discoursediscourseMatch1.6.0beta1beta
discoursediscourseMatch1.6.0beta10beta
discoursediscourseMatch1.6.0beta11beta
discoursediscourseMatch1.6.0beta12beta
discoursediscourseMatch1.6.0beta2beta
discoursediscourseMatch1.6.0beta3beta
discoursediscourseMatch1.6.0beta4beta
discoursediscourseMatch1.6.0beta5beta
discoursediscourseMatch1.6.0beta6beta
discoursediscourseMatch1.6.0beta7beta
discoursediscourseMatch1.6.0beta8beta
discoursediscourseMatch1.6.0beta9beta
discoursediscourseMatch1.7.0beta1beta
discoursediscourseMatch1.7.0beta10beta
discoursediscourseMatch1.7.0beta11beta
discoursediscourseMatch1.7.0beta2beta
discoursediscourseMatch1.7.0beta3beta
discoursediscourseMatch1.7.0beta4beta
discoursediscourseMatch1.7.0beta5beta
discoursediscourseMatch1.7.0beta6beta
discoursediscourseMatch1.7.0beta7beta
discoursediscourseMatch1.7.0beta8beta
discoursediscourseMatch1.7.0beta9beta
discoursediscourseMatch1.8.0beta1beta
discoursediscourseMatch1.8.0beta10beta
discoursediscourseMatch1.8.0beta11beta
discoursediscourseMatch1.8.0beta12beta
discoursediscourseMatch1.8.0beta13beta
discoursediscourseMatch1.8.0beta2beta
discoursediscourseMatch1.8.0beta3beta
discoursediscourseMatch1.8.0beta4beta
discoursediscourseMatch1.8.0beta5beta
discoursediscourseMatch1.8.0beta6beta
discoursediscourseMatch1.8.0beta7beta
discoursediscourseMatch1.8.0beta8beta
discoursediscourseMatch1.8.0beta9beta
discoursediscourseMatch1.9.0beta1beta
discoursediscourseMatch1.9.0beta10beta
discoursediscourseMatch1.9.0beta11beta
discoursediscourseMatch1.9.0beta12beta
discoursediscourseMatch1.9.0beta13beta
discoursediscourseMatch1.9.0beta14beta
discoursediscourseMatch1.9.0beta15beta
discoursediscourseMatch1.9.0beta16beta
discoursediscourseMatch1.9.0beta17beta
discoursediscourseMatch1.9.0beta2beta
discoursediscourseMatch1.9.0beta3beta
discoursediscourseMatch1.9.0beta4beta
discoursediscourseMatch1.9.0beta5beta
discoursediscourseMatch1.9.0beta6beta
discoursediscourseMatch1.9.0beta7beta
discoursediscourseMatch1.9.0beta8beta
discoursediscourseMatch1.9.0beta9beta
discoursediscourseMatch2.0.0beta1beta
discoursediscourseMatch2.0.0beta10beta
discoursediscourseMatch2.0.0beta2beta
discoursediscourseMatch2.0.0beta3beta
discoursediscourseMatch2.0.0beta4beta
discoursediscourseMatch2.0.0beta5beta
discoursediscourseMatch2.0.0beta6beta
discoursediscourseMatch2.0.0beta7beta
discoursediscourseMatch2.0.0beta8beta
discoursediscourseMatch2.0.0beta9beta
discoursediscourseMatch2.1.0beta1beta
discoursediscourseMatch2.1.0beta2beta
discoursediscourseMatch2.1.0beta3beta
discoursediscourseMatch2.1.0beta4beta
discoursediscourseMatch2.1.0beta5beta
discoursediscourseMatch2.1.0beta6beta
discoursediscourseMatch2.2.0beta1beta
discoursediscourseMatch2.2.0beta10beta
discoursediscourseMatch2.2.0beta2beta
discoursediscourseMatch2.2.0beta3beta
discoursediscourseMatch2.2.0beta4beta
discoursediscourseMatch2.2.0beta5beta
discoursediscourseMatch2.2.0beta6beta
discoursediscourseMatch2.2.0beta7beta
discoursediscourseMatch2.2.0beta8beta
discoursediscourseMatch2.2.0beta9beta
discoursediscourseMatch2.3.0beta1beta
discoursediscourseMatch2.3.0beta10beta
discoursediscourseMatch2.3.0beta11beta
discoursediscourseMatch2.3.0beta2beta
discoursediscourseMatch2.3.0beta3beta
discoursediscourseMatch2.3.0beta4beta
discoursediscourseMatch2.3.0beta5beta
discoursediscourseMatch2.3.0beta6beta
discoursediscourseMatch2.3.0beta7beta
discoursediscourseMatch2.3.0beta8beta
discoursediscourseMatch2.3.0beta9beta
discoursediscourseMatch2.4.0beta1beta
discoursediscourseMatch2.4.0beta10beta
discoursediscourseMatch2.4.0beta11beta
discoursediscourseMatch2.4.0beta2beta
discoursediscourseMatch2.4.0beta3beta
discoursediscourseMatch2.4.0beta4beta
discoursediscourseMatch2.4.0beta5beta
discoursediscourseMatch2.4.0beta6beta
discoursediscourseMatch2.4.0beta7beta
discoursediscourseMatch2.4.0beta8beta
discoursediscourseMatch2.4.0beta9beta
discoursediscourseMatch2.5.0beta1beta
discoursediscourseMatch2.5.0beta2beta
discoursediscourseMatch2.5.0beta3beta
discoursediscourseMatch2.5.0beta4beta
discoursediscourseMatch2.5.0beta5beta
discoursediscourseMatch2.5.0beta6beta
discoursediscourseMatch2.5.0beta7beta
discoursediscourseMatch2.6.0beta1beta
discoursediscourseMatch2.6.0beta2beta
discoursediscourseMatch2.6.0beta3beta
discoursediscourseMatch2.6.0beta4beta
discoursediscourseMatch2.6.0beta5beta
discoursediscourseMatch2.6.0beta6beta
discoursediscourseMatch2.7.0beta1beta
discoursediscourseMatch2.7.0beta2beta
discoursediscourseMatch2.7.0beta3beta
discoursediscourseMatch2.7.0beta4beta
discoursediscourseMatch2.7.0beta5beta
discoursediscourseMatch2.7.0beta6beta
discoursediscourseMatch2.7.0beta7beta
discoursediscourseMatch2.7.0beta8beta
discoursediscourseMatch2.7.0beta9beta
discoursediscourseMatch2.8.0beta1beta
discoursediscourseMatch2.8.0beta10beta
discoursediscourseMatch2.8.0beta11beta
discoursediscourseMatch2.8.0beta2beta
discoursediscourseMatch2.8.0beta3beta
discoursediscourseMatch2.8.0beta4beta
discoursediscourseMatch2.8.0beta5beta
discoursediscourseMatch2.8.0beta6beta
discoursediscourseMatch2.8.0beta7beta
discoursediscourseMatch2.8.0beta8beta
discoursediscourseMatch2.8.0beta9beta
discoursediscourseMatch2.9.0beta1beta
discoursediscourseMatch2.9.0beta10beta
discoursediscourseMatch2.9.0beta11beta
discoursediscourseMatch2.9.0beta12beta
discoursediscourseMatch2.9.0beta13beta
discoursediscourseMatch2.9.0beta14beta
discoursediscourseMatch2.9.0beta2beta
discoursediscourseMatch2.9.0beta3beta
discoursediscourseMatch2.9.0beta4beta
discoursediscourseMatch2.9.0beta5beta
discoursediscourseMatch2.9.0beta6beta
discoursediscourseMatch2.9.0beta7beta
discoursediscourseMatch2.9.0beta8beta
discoursediscourseMatch2.9.0beta9beta
discoursediscourseMatch3.0.0beta15beta
discoursediscourseMatch3.0.0beta16beta
discoursediscourseMatch3.1.0beta1beta
discoursediscourseMatch3.1.0beta2beta
discoursediscourseMatch3.1.0beta5beta
[
  {
    "vendor": "discourse",
    "product": "discourse",
    "versions": [
      {
        "version": " stable >= 3.0.5",
        "status": "affected"
      },
      {
        "version": "beta >= 3.1.0.beta6",
        "status": "affected"
      },
      {
        "version": "tests-passed >= 3.1.0.beta6",
        "status": "affected"
      }
    ]
  }
]

Data

Build on a solid foundation with Vulners data

We provide the essential building blocks for cybersecurity solutions with comprehensive, structured, and constantly updated vulnerability and exploits data

Api

Power your application with Vulners API

The Vulners REST API offers reliable, high-performance access to vulnerability intelligence, with 99.9% SLA uptime and CDN-backed data delivery for seamless global access

App

Assess and manage vulnerabilities with Vulners tools

Built on top of Vulners' database and SDK, end-user solutions give security professionals and developers lightweight and powerful tools for vulnerability remediation

17 Jun 2026 06:06Current
6Medium risk
Vulners AI Score6
CVSS 3.16.1 - 6.8
EPSS0.00397
SSVC
71