Lucene search
+L

3331 matches found

OpenVAS
OpenVAS
•added 2021/01/15 12:00 a.m.•74 views

Discourse < 2.7.0.beta4 Multiple Vulnerabilities

Discourse is prone to multiple vulnerabilities. SPDX-FileCopyrightText: 2021 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only CPE = "cpe:/a:discourse:discourse"; ifdescripti...

7.5CVSS7.6AI score0.03073EPSS
SaveExploits4References2
NVD
NVD
•added 2021/01/14 4:15 a.m.•27 views

CVE-2021-3138

In Discourse 2.7.0 through beta1, a rate-limit bypass leads to a bypass of the 2FA requirement for certain forms...

7.5CVSS7.5AI score0.03073EPSS
SaveExploits4References3
OSV
OSV
•added 2021/01/14 4:15 a.m.•33 views

CVE-2021-3138

In Discourse 2.7.0 through beta1, a rate-limit bypass leads to a bypass of the 2FA requirement for certain forms...

7.5CVSS6.7AI score
SaveExploits0References3
Prion
Prion
•added 2021/01/14 4:15 a.m.•28 views

Authentication flaw

In Discourse 2.7.0 through beta1, a rate-limit bypass leads to a bypass of the 2FA requirement for certain forms...

5CVSS7.5AI score0.03073EPSS
SaveExploits4References3Affected Software1
attackerkb
attackerkb
•added 2021/01/14 4:15 a.m.•10 views

CVE-2021-3138

In Discourse 2.7.0 through beta1, a rate-limit bypass leads to a bypass of the 2FA requirement for certain forms...

7.5CVSS7AI score0.03073EPSS
SaveExploits4References5
Cvelist
Cvelist
•added 2021/01/14 3:30 a.m.•51 views

CVE-2021-3138

In Discourse 2.7.0 through beta1, a rate-limit bypass leads to a bypass of the 2FA requirement for certain forms...

7.7AI score0.03073EPSS
SaveExploits4References3
CVE
CVE
•added 2021/01/14 3:30 a.m.•141 views

CVE-2021-3138

CVE-2021-3138 affects Discourse 2.7.0 through beta1, where a rate-limit bypass enables bypassing the 2FA requirement for certain forms. The vulnerability stems from how 2FA relies on rate-limiting, enabling bypasses under certain conditions. Documented impact is the 2FA bypass; exploitation detai...

7.5CVSS7.4AI score0.03073EPSS
SaveExploits4References3Affected Software1
Positive Technologies
Positive Technologies
•added 2021/01/14 12:00 a.m.•11 views

PT-2021-19276 · Discourse · Discourse

Name of the Vulnerable Software and Affected Versions: Discourse versions 2.7.0 through beta1 Description: A rate-limit bypass issue leads to a bypass of the 2FA requirement for certain forms. Recommendations: For versions 2.7.0 through beta1, update to a version that includes a fix for the...

7.5CVSS7.4AI score0.03073EPSS
SaveExploits4References8
CNNVD
CNNVD
•added 2021/01/13 12:00 a.m.•16 views

Discourse 安全漏洞

Discourse is an open source community discussion platform. The platform includes community, email, and chat room features.A security vulnerability exists in Discourse 2.7.0, which stems from 2FA's reliance on certain forms rate-limit.No details of the vulnerability are currently available...

7.5CVSS7.1AI score0.03073EPSS
SaveExploits4References7
OpenVAS
OpenVAS
•added 2020/10/21 12:00 a.m.•10 views

Discourse < 2.6.0.beta4 Information Disclosure Vulnerability

Discourse is prone to an information disclosure vulnerability. SPDX-FileCopyrightText: 2020 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only CPE =...

6.9AI score
SaveExploits0References2
OpenVAS
OpenVAS
•added 2020/08/26 12:00 a.m.•10 views

Discourse < 2.6.0.beta2 Multiple Vulnerabilities

Discourse is prone to multiple vulnerabilities. SPDX-FileCopyrightText: 2020 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only CPE = "cpe:/a:discourse:discourse"; ifdescripti...

7.3AI score
SaveExploits0References1
OpenVAS
OpenVAS
•added 2020/07/02 12:00 a.m.•111 views

Discourse < 2.5.0.beta6 Multiple Vulnerabilities

Discourse is prone to multiple vulnerabilities. SPDX-FileCopyrightText: 2020 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only CPE = "cpe:/a:discourse:discourse"; ifdescripti...

6.9CVSS7.6AI score0.99215EPSS
SaveExploits12References3
OpenVAS
OpenVAS
•added 2020/05/28 12:00 a.m.•103 views

Discourse < 2.5.0.beta5 Multiple Vulnerabilities

Discourse is prone to multiple vulnerabilities. SPDX-FileCopyrightText: 2020 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only CPE = "cpe:/a:discourse:discourse"; ifdescripti...

6.9CVSS7.6AI score0.99215EPSS
SaveExploits12References3
OpenVAS
OpenVAS
•added 2020/05/05 12:00 a.m.•14 views

Discourse < 2.5.0.beta3 Multiple Vulnerabilities

Discourse is prone to multiple vulnerabilities. SPDX-FileCopyrightText: 2020 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only CPE = "cpe:/a:discourse:discourse"; ifdescripti...

7.3AI score
SaveExploits0References1
OpenVAS
OpenVAS
•added 2020/03/19 12:00 a.m.•40 views

Discourse < 2.4.0.beta5 Multiple Vulnerabilities

Discourse is prone to multiple vulnerabilities. SPDX-FileCopyrightText: 2020 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only CPE = "cpe:/a:discourse:discourse"; ifdescripti...

7.3AI score
SaveExploits0References1
OpenVAS
OpenVAS
•added 2020/03/19 12:00 a.m.•40 views

Discourse < 2.4.0.beta9 Multiple Vulnerabilities

Discourse is prone to multiple vulnerabilities. SPDX-FileCopyrightText: 2020 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only CPE = "cpe:/a:discourse:discourse"; ifdescripti...

7.3AI score
SaveExploits0References1
OpenVAS
OpenVAS
•added 2020/03/19 12:00 a.m.•42 views

Discourse < 2.4.0.beta7 Permission Check Vulnerability

Discourse is prone to a permission check vulnerability. SPDX-FileCopyrightText: 2020 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only CPE = "cpe:/a:discourse:discourse";...

7.2AI score
SaveExploits0References1
Schneier on Security
Schneier on Security
•added 2020/01/13 2:21 p.m.•35 views

Artificial Personas and Public Discourse

Presidential campaign season is officially, officially, upon us now, which means it's time to confront the weird and insidious ways in which technology is warping politics. One of the biggest threats on the horizon: artificial personas are coming, and they're poised to take over political debate...

6.9AI score
SaveExploits0
CNVD
CNVD
•added 2019/08/28 12:00 a.m.•12 views

Discourse Cross-Site Request Forgery Vulnerability

Discourse is an open source community discussion platform. The platform includes features such as community, email and chat rooms. A cross-site request forgery vulnerability exists in Discourse version 2.3.2, which can be exploited by an attacker to send unintended requests to the server via an...

6.5CVSS6.9AI score0.00615EPSS
SaveExploits0References1
NVD
NVD
•added 2019/08/26 6:15 p.m.•33 views

CVE-2019-15515

Discourse 2.3.2 sends the CSRF token in the query string...

6.5CVSS6.5AI score0.00615EPSS
SaveExploits0References1
Rows per page
Query Builder