Lucene search
+L

52 matches found

OSV
OSV
•added 2024/03/06 11:09 a.m.•61 views

BIT-DISCOURSE-2021-43792 Notifications leak in Discourse

Discourse is an open source discussion platform. In affected versions a vulnerability affects users of tag groups who use the "Tags are visible only to the following groups" feature. A tag group may only allow a certain group e.g. staff to view certain tags. Users who were tracking or watching th...

4.3CVSS4.4AI score0.00857EPSS
SaveExploits0References4
Patchstack
Patchstack
•added 2023/07/19 12:00 a.m.•11 views

WordPress WordPress Tag Cloud Plugin – Tag Groups Plugin <= 1.44.3.1 is vulnerable to Cross Site Scripting (XSS)

Software WordPress Tag Cloud Plugin – Tag Groups Type Plugin Vulnerable versions = 1.44.3.1 Fixed in 2.0.0 OWASP Top 10 A3: Injection Classification Cross Site Scripting XSS CVE CVE-2023-33999 Patch priority High CVSS severity High 7.1 Developer Claim ownership PSID 37ceda657852 Credits Rafie...

6AI score0.00272EPSS
SaveExploits0References3Affected Software1
Patchstack
Patchstack
•added 2022/02/28 12:00 a.m.•13 views

WordPress WordPress Tag Cloud Plugin – Tag Groups plugin < 1.43.10.1 - Sensitive Information Disclosure vulnerability

Sensitive Information Disclosure vulnerability discovered in WordPress WordPress Tag Cloud Plugin – Tag Groups plugin versions 1.43.10.1. Solution Update the WordPress WordPress Tag Cloud Plugin – Tag Groups plugin to the latest available version at least 1.43.10.1...

2AI score
SaveExploits0References2Affected Software1
Patchstack
Patchstack
•added 2022/02/28 12:00 a.m.•20 views

WordPress WordPress Tag Cloud Plugin – Tag Groups plugin < 1.43.10.1 - Toggle The Debug Mode via Cross-Site Request Forgery (CSRF) vulnerability

Toggle The Debug Mode via Cross-Site Request Forgery CSRF vulnerability discovered in WordPress WordPress Tag Cloud Plugin – Tag Groups plugin versions 1.43.10.1. Solution Update the WordPress WordPress Tag Cloud Plugin – Tag Groups plugin to the latest available version at least 1.43.10.1...

3.6AI score
SaveExploits0References2Affected Software1
NVD
NVD
•added 2021/12/01 8:15 p.m.•39 views

CVE-2021-43792

Discourse is an open source discussion platform. In affected versions a vulnerability affects users of tag groups who use the "Tags are visible only to the following groups" feature. A tag group may only allow a certain group e.g. staff to view certain tags. Users who were tracking or watching th...

4.3CVSS0.00857EPSS
SaveExploits0References3
attackerkb
attackerkb
•added 2021/12/01 8:15 p.m.•11 views

CVE-2021-43792

Discourse is an open source discussion platform. In affected versions a vulnerability affects users of tag groups who use the "Tags are visible only to the following groups" feature. A tag group may only allow a certain group e.g. staff to view certain tags. Users who were tracking or watching th...

4.3CVSS5.8AI score0.00857EPSS
SaveExploits0References4Affected Software1
OSV
OSV
•added 2021/12/01 8:15 p.m.•31 views

CVE-2021-43792

Discourse is an open source discussion platform. In affected versions a vulnerability affects users of tag groups who use the "Tags are visible only to the following groups" feature. A tag group may only allow a certain group e.g. staff to view certain tags. Users who were tracking or watching th...

4.3CVSS6.7AI score
SaveExploits0References3
Prion
Prion
•added 2021/12/01 8:15 p.m.•30 views

Design/Logic Flaw

Discourse is an open source discussion platform. In affected versions a vulnerability affects users of tag groups who use the "Tags are visible only to the following groups" feature. A tag group may only allow a certain group e.g. staff to view certain tags. Users who were tracking or watching th...

3.5CVSS4.6AI score0.00857EPSS
SaveExploits0References3Affected Software1
Cvelist
Cvelist
•added 2021/12/01 7:35 p.m.•40 views

CVE-2021-43792 Notifications leak in Discourse

Discourse is an open source discussion platform. In affected versions a vulnerability affects users of tag groups who use the "Tags are visible only to the following groups" feature. A tag group may only allow a certain group e.g. staff to view certain tags. Users who were tracking or watching th...

4.3CVSS5AI score0.00857EPSS
SaveExploits0References3
CVE
CVE
•added 2021/12/01 7:35 p.m.•87 views

CVE-2021-43792

Discourse CVE-2021-43792 affects the open-source discussion platform where the tag visibility feature allows a tag group (e.g., staff) to see certain tags. If a user tracked or watched tags via /preferences/tags and their staff status is revoked, they will still receive notifications related to t...

4.3CVSS4.4AI score0.00857EPSS
SaveExploits0References3Affected Software1
Positive Technologies
Positive Technologies
•added 2021/12/01 12:00 a.m.•16 views

PT-2021-23938 · Discourse · Discourse

Name of the Vulnerable Software and Affected Versions: Discourse versions prior to 2.7.11 Description: A vulnerability affects users of tag groups who use the "Tags are visible only to the following groups" feature in Discourse, an open source discussion platform. This feature allows a tag group ...

4.3CVSS4.3AI score0.00857EPSS
SaveExploits0References8
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2021/12/01 12:00 a.m.•0 views

CVE-2021-43792: Exposure of Sensitive Information to an Unauthorized Actor

Discourse is an open source discussion platform. In affected versions a vulnerability affects users of tag groups who use the "Tags are visible only to the following groups" feature. A tag group may only allow a certain group e.g. staff to view certain tags. Users who were tracking or watching th...

4.3CVSS5.8AI score0.00857EPSS
SaveExploits0References2
Rows per page
Query Builder