Lucene search
K

CVE-2025-24972

šŸ—“ļøĀ 26 Mar 2025Ā 14:15:13Reported byĀ GitHub_MTypeĀ 
cve
Ā cve
šŸ”—Ā web.nvd.nist.govšŸ‘Ā 61Ā Views

Discourse versions prior to 3.3.4 allow users to join group chats despite disabling messaging.

Related
Detection
Affected
Refs
ReporterTitlePublishedViews
Family
Circl
CVE-2025-24972
26 Mar 202514:25
–circl
CNNVD
Discourse å®‰å…Øę¼ę“ž
26 Mar 202500:00
–cnnvd
Cvelist
CVE-2025-24972 Discourse may bypass user preference when adding users to chat groups
26 Mar 202514:15
–cvelist
EUVD
EUVD-2025-8202
3 Oct 202520:07
–euvd
NVD
CVE-2025-24972
26 Mar 202515:16
–nvd
OpenVAS
Discourse < 3.3.4 Multiple Vulnerabilities
5 Feb 202500:00
–openvas
OpenVAS
Discourse 3.4.x < 3.4.0.beta5 Multiple Vulnerabilities
5 Feb 202500:00
–openvas
OSV
BIT-DISCOURSE-2025-24972 Discourse may bypass user preference when adding users to chat groups
28 Mar 202509:46
–osv
OSV
CVE-2025-24972 Discourse may bypass user preference when adding users to chat groups
26 Mar 202514:15
–osv
RedhatCVE
CVE-2025-24972
28 Mar 202518:09
–redhatcve
Rows per page
NVD
Vulners
Node
discoursediscourseRange<3.3.4stable
OR
discoursediscourseRange<3.4.0beta
OR
discoursediscourseMatch3.4.0beta1beta
OR
discoursediscourseMatch3.4.0beta2beta
OR
discoursediscourseMatch3.4.0beta3beta
OR
discoursediscourseMatch3.4.0beta4beta
[
  {
    "vendor": "discourse",
    "product": "discourse",
    "versions": [
      {
        "version": "< 3.3.4",
        "status": "affected"
      },
      {
        "version": ">= 3.4.0.beta1, < 3.4.0.beta5",
        "status": "affected"
      }
    ]
  }
]

Data

Build on a solid foundation withĀ Vulners data

WeĀ provide theĀ essential building blocks forĀ cybersecurity solutions withĀ comprehensive, structured, andĀ constantly updated vulnerability andĀ exploits data

Api

Power your application withĀ Vulners API

The Vulners REST API offers reliable, high-performance access toĀ vulnerabilityĀ intelligence, withĀ 99.9%Ā SLAĀ uptime andĀ CDN-backed data delivery forĀ seamlessĀ global access

App

Assess and manage vulnerabilities withĀ VulnersĀ tools

Built on top of Vulners' database and SDK, end-user solutions give security professionals and developers lightweight and powerful tools for vulnerability remediation

25 Aug 2025 17:06Current
7High risk
Vulners AI Score7
CVSS 3.14.3
EPSS0.00118
SSVC
61