Lucene search

CVE-2024-23654

🗓️ 21 Feb 2024 21:09:15Reported by [email protected]Type

AI plugin vulnerability in Discours

Reporter	Title	Published	Views	Family All 5
CVE	CVE-2024-23654	21 Feb 202421:15	–	cve
Cvelist	CVE-2024-23654 discourse-ai admin-initiated SSRF when interacting with AI services	21 Feb 202420:28	–	cvelist
OSV	CVE-2024-23654	21 Feb 202421:15	–	osv
Prion	Server side request forgery (ssrf)	21 Feb 202421:15	–	prion
Vulnrichment	CVE-2024-23654 discourse-ai admin-initiated SSRF when interacting with AI services	21 Feb 202420:28	–	vulnrichment

Nvd

Node

discourse aiRange<2024-02-21

Source	Link
github	www.github.com/discourse/discourse-ai/commit/94ba0dadc2cf38e8f81c3936974c167219878edd
github	www.github.com/discourse/discourse-ai/security/advisories/GHSA-32cj-rm2q-22cc

Transform Your Security Services

Elevate your offerings with Vulners' advanced Vulnerability Intelligence. Contact us for a demo and discover the difference comprehensive, actionable intelligence can make in your security strategy.

Book a live demo

21 Feb 2024 21:15Current

4.4Medium risk

Vulners AI Score4.4

CVSS37.2

EPSS0.0009

CWE-918