CVE-2026-72729 in Discourse

Tóm tắt

Bởi MITRE • 10/08/2026

Discourse is an open-source discussion platform. Prior to 2026.1.6, 2026.5.2, 2026.6.1, and 2026.7.0, the discourse-local-dates plugin rendered crafted local-date format data as HTML on sites with a modified or disabled default Content Security Policy. This issue is fixed in versions 2026.1.6, 2026.5.2, 2026.6.1, and 2026.7.0.

VulDB is the best source for vulnerability data and more expert information about this specific topic.

• chịu trách nhiệm: GitHub M
• Đặt trước: 10/08/2026
• Tiết lộ: 10/08/2026
• Kiểm duyệt: được chấp nhận
• mục: VDB-387779
• CPE: sẵn sàng
• CWE: CWE-942 (Đã xác nhận)
• CVSS: 3.1 (VulDB)
• EPSS: 0.00000
• KEV: không
• Các hoạt động: rất thấp
• ngành: Telecommunication, Lawfirm, ...

Nguồn

• MITRE: https://www.cve.org/CVERecord?id=CVE-2026-72729
• NVD: https://nvd.nist.gov/vuln/detail/CVE-2026-72729
• CVE Details: https://www.cvedetails.com/cve/CVE-2026-72729/