Discourse Vulnerabilidad

Cronología

El año pasado

Versión

3.023
2.8.020
2.8.120
2.8.220
2.8.318

Contramedidas

Official Fix129
Temporary Fix0
Workaround0
Unavailable0
Not Defined7

Explotabilidad

High0
Functional0
Proof-of-Concept0
Unproven0
Not Defined136

Vector de acceso

Not Defined0
Physical0
Local1
Adjacent2
Network133

Autenticación

Not Defined0
High18
Low70
None48

La interacción del usuario

Not Defined0
Required45
None91

C3BM Index

El año pasado

CVSSv3 Base

≤10
≤20
≤32
≤423
≤549
≤642
≤713
≤84
≤93
≤100

CVSSv3 Temp

≤10
≤20
≤33
≤422
≤549
≤643
≤712
≤84
≤93
≤100

VulDB

≤10
≤23
≤313
≤427
≤554
≤624
≤711
≤83
≤91
≤100

NVD

≤10
≤20
≤30
≤42
≤513
≤620
≤713
≤89
≤93
≤103

CNA

≤10
≤21
≤33
≤414
≤540
≤627
≤721
≤810
≤96
≤102

Proveedor

≤10
≤20
≤30
≤40
≤50
≤60
≤70
≤80
≤90
≤100

Research

≤10
≤20
≤30
≤40
≤50
≤60
≤70
≤80
≤90
≤100

Explotar día 0

<1k21
<2k107
<5k8
<10k0
<25k0
<50k0
<100k0
≥100k0

Explotar hoy

<1k136
<2k0
<5k0
<10k0
<25k0
<50k0
<100k0
≥100k0

Explotar el volumen del mercado

El año pasado

🔴 CTI Ocupaciones

Affected Versions (104): 0.1, 0.2, 0.3, 0.4, 0.5, 0.6, 0.7, 0.8, 0.9, 1.0, 2.0, 2.1, 2.2, 2.3, 2.3.2, 2.4, 2.4.0.beta1, 2.5, 2.6, 2.7, 2.7.0 beta1, 2.7.1, 2.7.2, 2.7.3, 2.7.4, 2.7.5, 2.7.6, 2.7.7, 2.7.8, 2.7.9, 2.7.11, 2.7.12, 2.8, 2.8.0.beta1, 2.8.0.beta2, 2.8.0.beta3, 2.8.0.beta4, 2.8.0.beta6, 2.8.0.beta9, 2.8.1, 2.8.2, 2.8.3, 2.8.4, 2.8.5, 2.8.6, 2.8.7, 2.8.8, 2.8.9, 2.8.11, 2.8.12, 2.8.13, 2.9.0.beta, 2.9.0.beta.1, 2.9.0.beta.2, 2.9.0.beta.3, 2.9.0.beta.4, 2.9.0.beta.5, 2.9.0.beta.6, 2.9.0.beta.7, 2.9.0.beta.8, 2.9.0.beta.9, 2.9.0.beta.11, 2.9.0.beta.12, 2.9.0.beta1, 2.9.0.beta3, 2.9.0.beta4, 2.9.0.beta9, 2.9.0.beta11, 2.9.0.beta12, 2.9.0.beta13, 2.9.0.beta14, 2.9.0.beta15, 3, 3.0, 3.0.0.beta14, 3.0.0.beta15, 3.0.1, 3.0.2, 3.0.3, 3.0.4, 3.0.5, 3.1, 3.1.0.beta1, 3.1.0.beta2, 3.1.0.beta3, 3.1.0.beta4, 3.1.0.beta6, 3.1.1, 3.1.2, 3.1.3, 3.1.4, 3.2, 3.2.0.beta1, 3.2.0.beta2, 3.2.0.beta3, 3.2.0.beta4, 3.3, 3.3.0.beta1, 3.3.1, 3.3.2, 3.3.3, 3.3.4, 3.3.5, 3.3.6

Tipo de software: JavaScript Library

Fecha de publicaciónBaseTempVulnerabilidad0dayHoyExpConCTICVE
2024-04-154.34.2discourse-reactions divulgación de información$0-$5k$0-$5kNot DefinedOfficial Fix0.04CVE-2024-31219
2024-03-155.35.3Discourse Subcategory divulgación de información$0-$5k$0-$5kNot DefinedNot Defined0.08CVE-2024-24748
2024-03-155.35.3Discourse Category divulgación de información$0-$5k$0-$5kNot DefinedNot Defined0.04CVE-2024-28242
2024-03-156.56.5Discourse Invite Route denegación de servicio$0-$5k$0-$5kNot DefinedNot Defined0.04CVE-2024-27085
2024-03-155.35.2Discourse uploads denegación de servicio$0-$5k$0-$5kNot DefinedOfficial Fix0.06CVE-2024-24827
2024-03-156.56.5Discourse CSV Export denegación de servicio$0-$5k$0-$5kNot DefinedNot Defined0.04CVE-2024-27100
2024-02-224.34.2Discourse discourse-calendar Event Invite divulgación de información$0-$5k$0-$5kNot DefinedOfficial Fix0.05CVE-2024-24817
2024-02-213.43.3discourse-ai escalada de privilegios$0-$5k$0-$5kNot DefinedOfficial Fix0.00CVE-2024-23654
2024-02-215.45.3Discourse discourse-calendar Private Event escalada de privilegios$0-$5k$0-$5kNot DefinedOfficial Fix0.00CVE-2024-26145
2024-02-218.58.3discourse-microsoft-auth microsoft_auth:revoke escalada de privilegios$0-$5k$0-$5kNot DefinedOfficial Fix0.02CVE-2023-46241
2024-02-024.64.6discourse-group-membership-ip-block divulgación de información$0-$5k$0-$5kNot DefinedOfficial Fix0.02CVE-2024-24755
2024-01-315.35.3Discourse cross site scripting$0-$5k$0-$5kNot DefinedOfficial Fix0.02CVE-2024-23834
2024-01-123.93.8discourse-reactions Notifications escalada de privilegios$0-$5k$0-$5kNot DefinedOfficial Fix0.03CVE-2023-49098
2024-01-124.24.2Discourse Secure Upload URL escalada de privilegios$0-$5k$0-$5kNot DefinedOfficial Fix0.02CVE-2023-49099
2024-01-127.17.1Discourse Message Serializer denegación de servicio$0-$5k$0-$5kNot DefinedOfficial Fix0.02CVE-2023-48297
2024-01-124.34.2Discourse denegación de servicio$0-$5k$0-$5kNot DefinedOfficial Fix0.04CVE-2024-21655
2023-11-106.56.4Discourse Embedding escalada de privilegios$0-$5k$0-$5kNot DefinedOfficial Fix0.02CVE-2023-47121
2023-11-106.46.3Discourse Favicon URL denegación de servicio$0-$5k$0-$5kNot DefinedOfficial Fix0.03CVE-2023-47120
2023-11-105.25.2Discourse cross site scripting$0-$5k$0-$5kNot DefinedOfficial Fix0.00CVE-2023-47119
2023-11-104.74.6Discourse Quote denegación de servicio$0-$5k$0-$5kNot DefinedOfficial Fix0.00CVE-2023-45806
2023-11-103.33.2Discourse Bookmark Reminder divulgación de información$0-$5k$0-$5kNot DefinedOfficial Fix0.05CVE-2023-45816
2023-11-104.74.6Discourse Theme denegación de servicio$0-$5k$0-$5kNot DefinedOfficial Fix0.02CVE-2023-46130
2023-10-175.65.6Discourse Digest Email Preview UI cross site scripting$0-$5k$0-$5kNot DefinedOfficial Fix0.00CVE-2023-43659
2023-10-174.34.3Discourse escalada de privilegios$0-$5k$0-$5kNot DefinedOfficial Fix0.00CVE-2023-45147
2023-10-176.46.3Discourse POST Request divulgación de información$0-$5k$0-$5kNot DefinedOfficial Fix0.03CVE-2023-45131

111 no se muestran más entradas

Want to stay up to date on a daily basis?

Enable the mail alert feature now!