Lucene search
K

6 matches found

RedhatCVE
RedhatCVE
added 2026/03/26 3:9 p.m.2 views

CVE-2026-33425

Discourse is an open-source discussion platform. Prior to versions 2026.3.0-latest.1, 2026.2.1, and 2026.1.2, unauthenticated users can determine whether a specific user is a member of a private group by observing changes in directory results when using the excludegroups parameter. Versions...

6.9CVSS5.8AI score0.00076EPSS
Exploits0References1
NVD
NVD
added 2026/03/21 12:16 a.m.0 views

CVE-2026-33425

Discourse is an open-source discussion platform. Prior to versions 2026.3.0-latest.1, 2026.2.1, and 2026.1.2, unauthenticated users can determine whether a specific user is a member of a private group by observing changes in directory results when using the excludegroups parameter. Versions...

6.9CVSS0.00076EPSS
Exploits0References1
CNNVD
CNNVD
added 2026/03/21 12:0 a.m.2 views

Discourse 安全漏洞

Discourse is an open-source community discussion platform developed by Discourse. This platform includes features such as communities, email communication, and chat rooms. Versions of Discourse prior to 2026.3.0-latest.1, as well as versions before 2026.2.1 and 2026.1.2, have security...

6.9CVSS5.8AI score0.00076EPSS
Exploits0References1
OSV
OSV
added 2026/03/20 11:12 p.m.1 views

CVE-2026-33425 Discourse has inferable private group membership or existence via exclude_groups parameter

Discourse is an open-source discussion platform. Prior to versions 2026.3.0-latest.1, 2026.2.1, and 2026.1.2, unauthenticated users can determine whether a specific user is a member of a private group by observing changes in directory results when using the excludegroups parameter. Versions...

6.9CVSS5.9AI score0.00076EPSS
Exploits0References3
Vulnrichment
Vulnrichment
added 2026/03/20 11:12 p.m.0 views

CVE-2026-33425 Discourse has inferable private group membership or existence via exclude_groups parameter

Discourse is an open-source discussion platform. Prior to versions 2026.3.0-latest.1, 2026.2.1, and 2026.1.2, unauthenticated users can determine whether a specific user is a member of a private group by observing changes in directory results when using the excludegroups parameter. Versions...

6.9CVSS5.8AI score0.00076EPSS
Exploits0References1
Positive Technologies
Positive Technologies
added 2026/03/20 12:0 a.m.3 views

PT-2026-26709

Name of the Vulnerable Software and Affected Versions Discourse versions prior to 2026.3.0-latest.1 Discourse versions prior to 2026.2.1 Discourse versions prior to 2026.1.2 Description Discourse is an open-source discussion platform. Unauthenticated users can determine whether a specific user is...

6.9CVSS5.9AI score0.00076EPSS
Exploits0References4
Rows per page
Query Builder