CVE-2024-53851

Discourse is an open source platform for community discussion. In affected versions the endpoint for generating inline oneboxes for URLs wasn't enforcing limits on the number of URLs that it accepted, allowing a malicious user to inflict denial of service on some parts of the app. This...

CVE-2024-53851

creationtimestamp| type| source ---|---|--- 2025-02-04 21:20:48+00:00| seen| https://infosec.exchange/users/cve/statuses/113947708453042718 2025-02-04 22:16:16+00:00| seen| https://bsky.app/profile/cve-notifications.bsky.social/post/3lhf3hrtmq22t 2025-02-05 00:45:50+00:00| seen|...

CVE-2024-53851 Partial denial of service via inline oneboxes in Discourse

Discourse is an open source platform for community discussion. In affected versions the endpoint for generating inline oneboxes for URLs wasn't enforcing limits on the number of URLs that it accepted, allowing a malicious user to inflict denial of service on some parts of the app. This...

CVE-2024-53851

CVE-2024-53851 affects Discourse: an issue in the endpoint that generates inline oneboxes for URLs did not enforce limits on accepted URLs, enabling authenticated users to trigger denial of service in parts of the app. The vulnerability is mitigated by upgrading to the latest stable, beta, or tes...

CVE-2024-53851 Partial denial of service via inline oneboxes in Discourse

Discourse is an open source platform for community discussion. In affected versions the endpoint for generating inline oneboxes for URLs wasn't enforcing limits on the number of URLs that it accepted, allowing a malicious user to inflict denial of service on some parts of the app. This...