Lucene search
+L

1 matches found

OSV
OSV
added 2026/01/28 7:19 p.m.10 views

CVE-2025-68934 Discourse Has Denial of Service (DoS) Vulnerability in Drafts Creation Endpoint

Discourse is an open source discussion platform. In versions prior to 3.5.4, 2025.11.2, 2025.12.1, and 2026.1.0, authenticated users can submit crafted payloads to /drafts.json that cause On^2 processing in Base62.decode, tying up workers for 35-60 seconds per request. This affects all users as t...

6.5CVSS5.8AI score
SaveExploits0References3
Rows per page
Query Builder