CVE-2023-47120

Discourse is an open source platform for community discussion. In versions 3.1.0 through 3.1.2 of the stable branch and versions 3.1.0,beta6 through 3.2.0.beta2 of the beta and tests-passed branches, Redis memory can be depleted by crafting a site with an abnormally long favicon URL and drafting...

CVE-2023-47120

Discourse is an open source platform for community discussion. In versions 3.1.0 through 3.1.2 of the stable branch and versions 3.1.0,beta6 through 3.2.0.beta2 of the beta and tests-passed branches, Redis memory can be depleted by crafting a site with an abnormally long favicon URL and drafting...

CVE-2023-47120

Discourse DoS via Onebox favicon URL affects multiple branches: stable 3.1.0–3.1.2 and beta/tests-passed 3.1.0,beta6–3.2.0.beta2. The root cause is Redis memory depletion triggered by crafting a site with an abnormally long favicon URL and drafting multiple posts that Onebox it. Impact is high: p...

Discourse 3.1.x < 3.1.3, 3.2.x < 3.2.0.beta3 DoS Vulnerability

Discourse is prone to a denial of service DoS vulnerability. SPDX-FileCopyrightText: 2023 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only CPE = "cpe:/a:discourse:discourse"...