Lucene search
K

6 matches found

NVD
NVD
added 2024/12/19 8:15 p.m.14 views

CVE-2024-49765

Discourse is an open source platform for community discussion. Sites that are using discourse connect but still have local logins enabled could allow attackers to bypass discourse connect to create accounts and login. This problem is patched in the latest version of Discourse. Users unable to...

9.1CVSS0.00181EPSS
Exploits0References1
OSV
OSV
added 2024/12/19 7:15 p.m.2 views

CVE-2024-49765 Bypass of Discourse Connect using other login paths if enabled in Discourse

Discourse is an open source platform for community discussion. Sites that are using discourse connect but still have local logins enabled could allow attackers to bypass discourse connect to create accounts and login. This problem is patched in the latest version of Discourse. Users unable to...

5.3CVSS6.4AI score0.00181EPSS
Exploits0References3
Vulnrichment
Vulnrichment
added 2024/12/19 7:15 p.m.14 views

CVE-2024-49765 Bypass of Discourse Connect using other login paths if enabled in Discourse

Discourse is an open source platform for community discussion. Sites that are using discourse connect but still have local logins enabled could allow attackers to bypass discourse connect to create accounts and login. This problem is patched in the latest version of Discourse. Users unable to...

5.3CVSS6.7AI score0.00181EPSS
Exploits0References1
CVE
CVE
added 2024/12/19 7:15 p.m.63 views

CVE-2024-49765

CVE-2024-49765 affects Discourse where sites enabling Discourse Connect alongside local login methods could allow an attacker to bypass Discourse Connect to create accounts and log in. The issue is described as a bypass of login paths rather than a remote exploit; affected component is the Discou...

9.1CVSS5.3AI score0.00181EPSS
Exploits0References1Affected Software1
Positive Technologies
Positive Technologies
added 2024/12/19 12:0 a.m.2 views

PT-2024-33675 · Discourse · Discourse

Name of the Vulnerable Software and Affected Versions: Discourse versions prior to the latest version Description: The issue affects sites using Discourse Connect with local logins enabled, potentially allowing attackers to bypass Discourse Connect and create accounts or log in. This problem has...

5.3CVSS6.7AI score0.00181EPSS
Exploits0References6
Debian CVE
Debian CVE
added 2018/03/08 8:0 p.m.18 views

CVE-2014-7271

Simple Desktop Display Manager SDDM before 0.10.0 allows local users to log in as user "sddm" without authentication...

7.8CVSS7.4AI score0.00087EPSS
Exploits0
Rows per page
Query Builder