3647 matches found
Discourse < 2.5.0.beta6 Multiple Vulnerabilities
Discourse is prone to multiple vulnerabilities. SPDX-FileCopyrightText: 2020 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only CPE = "cpe:/a:discourse:discourse"; ifdescripti...
Discourse < 2.5.0.beta5 Multiple Vulnerabilities
Discourse is prone to multiple vulnerabilities. SPDX-FileCopyrightText: 2020 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only CPE = "cpe:/a:discourse:discourse"; ifdescripti...
Discourse < 2.5.0.beta3 Multiple Vulnerabilities
Discourse is prone to multiple vulnerabilities. SPDX-FileCopyrightText: 2020 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only CPE = "cpe:/a:discourse:discourse"; ifdescripti...
Discourse < 2.4.0.beta9 Multiple Vulnerabilities
Discourse is prone to multiple vulnerabilities. SPDX-FileCopyrightText: 2020 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only CPE = "cpe:/a:discourse:discourse"; ifdescripti...
Discourse < 2.4.0.beta5 Multiple Vulnerabilities
Discourse is prone to multiple vulnerabilities. SPDX-FileCopyrightText: 2020 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only CPE = "cpe:/a:discourse:discourse"; ifdescripti...
Discourse < 2.4.0.beta7 Permission Check Vulnerability
Discourse is prone to a permission check vulnerability. SPDX-FileCopyrightText: 2020 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only CPE = "cpe:/a:discourse:discourse";...
Artificial Personas and Public Discourse
Presidential campaign season is officially, officially, upon us now, which means it's time to confront the weird and insidious ways in which technology is warping politics. One of the biggest threats on the horizon: artificial personas are coming, and they're poised to take over political debate...
Discourse Cross-Site Request Forgery Vulnerability
Discourse is an open source community discussion platform. The platform includes features such as community, email and chat rooms. A cross-site request forgery vulnerability exists in Discourse version 2.3.2, which can be exploited by an attacker to send unintended requests to the server via an...
CVE-2019-15515
Discourse 2.3.2 sends the CSRF token in the query string...
CVE-2019-15515
Discourse 2.3.2 sends the CSRF token in the query string...
CVE-2019-15515
CVE-2019-15515 affects Discourse 2.3.2, where the CSRF token is sent in the query string. The connected documents confirm the vulnerability class as Cross-Site Request Forgery affecting Discourse; no explicit exploitation details are provided in the documents. No remediation or patched version is...
CVE-2019-15515
Discourse 2.3.2 sends the CSRF token in the query string...
CVE-2019-15515
Discourse 2.3.2 sends the CSRF token in the query string...
CVE-2019-15515: Cross-Site Request Forgery (CSRF)
Discourse 2.3.2 sends the CSRF token in the query string...
PT-2019-14237
Name of the Vulnerable Software and Affected Versions Discourse version 2.3.2 Description The issue involves Discourse sending the CSRF token in the query string, which could potentially be exploited. Recommendations For Discourse version 2.3.2, consider updating to a newer version that does not...
Discourse input validation error vulnerability
Discourse is an open source community discussion platform. The platform includes community, email, and chat room features.Discourse is vulnerable to an input validation error that stems from a lack of authentication measures or insufficient authentication strength in the web system or product. No...
Discourse Access Control Error Vulnerability
Discourse is an open source community discussion platform. The platform includes community, email, and chat room features.An access control error vulnerability exists in versions of Discourse prior to 2.3.0 and 2.4.x prior to 2.4.0.beta3, which stems from a network system or product that does not...
CVE-2019-1020018
Discourse before 2.3.0 and 2.4.x before 2.4.0.beta3 lacks a confirmation screen when logging in via an email link...
