Discourse < 3.2.1 Multiple Vulnerabilities

Discourse is prone to multiple vulnerabilities. SPDX-FileCopyrightText: 2025 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only CPE = "cpe:/a:discourse:discourse"; ifdescripti...

CVE-2024-24748

creationtimestamp| type| source ---|---|--- 2024-03-15 21:22:02+00:00| seen| https://t.me/ctinow/209152 2024-03-15 21:26:15+00:00| seen| https://t.me/ctinow/209165...

CVE-2024-24748

CVE-2024-24748 affects Discourse. The vulnerability allows an attacker to learn that a secret subcategory exists under a public category that has no public subcategories. The issue is mitigated by upgrading to the latest stable, beta, or tests-passed Discourse release, as documented in multiple a...

CVE-2024-24748 Disclosure of the existence of secret subcategories in Discourse

Discourse is an open source platform for community discussion. In affected versions an attacker can learn that a secret subcategory exists under a public category which has no public subcategories. The issue is patched in the latest stable, beta and tests-passed version of Discourse. Users are...