Lucene search
K

Vulnerability fixed in Discourse

🗓️ 25 Oct 2021 00:00:00Reported by NCSCType 
ncsc
 ncsc
🔗 advisories.ncsc.nl👁 1 Views

Discourse fixes unauthenticated remote code execution via webhooks due to input validation in the aws software development kit; updates released.

Related
ReporterTitlePublishedViews
Family
Circl
CVE-2021-41163
25 Oct 202109:25
circl
CISA
Critical RCE Vulnerability in Discourse 
24 Oct 202100:00
cisa
CNNVD
Discourse 注入漏洞
20 Oct 202100:00
cnnvd
CNVD
Discourse Injection Vulnerability
24 Oct 202100:00
cnvd
CVE
CVE-2021-41163
20 Oct 202122:30
cve
Cvelist
CVE-2021-41163 RCE via malicious SNS subscription payload
20 Oct 202122:30
cvelist
EUVD
EUVD-2021-28273
3 Oct 202520:07
euvd
NVD
CVE-2021-41163
20 Oct 202123:15
nvd
OpenVAS
Discourse < 2.7.9 RCE Vulnerability
26 Oct 202100:00
openvas
OpenVAS
Discourse 2.8.x < 2.8.0.beta7 RCE Vulnerability
26 Oct 202100:00
openvas
Rows per page

Data

Build on a solid foundation with Vulners data

We provide the essential building blocks for cybersecurity solutions with comprehensive, structured, and constantly updated vulnerability and exploits data

Api

Power your application with Vulners API

The Vulners REST API offers reliable, high-performance access to vulnerability intelligence, with 99.9% SLA uptime and CDN-backed data delivery for seamless global access

App

Assess and manage vulnerabilities with Vulners tools

Built on top of Vulners' database and SDK, end-user solutions give security professionals and developers lightweight and powerful tools for vulnerability remediation

25 Oct 2021 00:00Current
7.7High risk
Vulners AI Score7.7
CVSS 27.5
CVSS 3.19.8 - 10
EPSS0.19812
1