Discourse < 2.9.0.beta13 Multiple Vulnerabilities

Discourse is prone to multiple vulnerabilities. SPDX-FileCopyrightText: 2022 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only CPE = "cpe:/a:discourse:discourse"; ifdescripti...

CVE-2022-41921 Discourse chat messages should have a maximum character limit

Discourse is an open-source discussion platform. Prior to version 2.9.0.beta13, users can post chat messages of an unlimited length, which can cause a denial of service for other users when posting huge amounts of text. Users should upgrade to version 2.9.0.beta13, where a limit has been...

CVE-2022-41921

Discourse CVE-2022-41921 affects the open-source Discourse platform prior to version 2.9.0.beta13, where chat messages could be posted with unlimited length, enabling a denial-of-service condition for other users when large text is posted. The underlying issue is the lack of a length limit in cha...