Security Advisory

CVE-2024-35227

CVE vulnerability detail — eXtreme Datacenter Security Operations

Published 2024-07-03 17:39:38

Last updated 2024-08-02 03:07:46

Assigner GitHub_M

State PUBLISHED

Description

Discourse is an open-source discussion platform. Prior to version 3.2.3 on the `stable` branch and version 3.3.0.beta3 on the `tests-passed` branch, Oneboxing against a carefully crafted malicious URL can reduce the availability of a Discourse instance. The problem has been patched in version 3.2.3 on the `stable` branch and version 3.3.0.beta3 on the `tests-passed` branch. There are no known workarounds available for this vulnerability.

← Browse all CVEs View on cve.org ↗