Discourse is an open source platform for community discussion. In affected versions an attacker can learn that a secret subcategory exists under a public category which has no public subcategories. The issue is patched in the latest stable, beta and tests-passed version of Discourse. Users are advised to upgrade. There are no known workarounds for this vulnerability.
References
Configurations
Configuration 1 (hide)
|
History
09 Apr 2025, 15:36
| Type | Values Removed | Values Added |
|---|---|---|
| CWE | NVD-CWE-noinfo | |
| References | () https://github.com/discourse/discourse/commit/819361ba28f86a1347059af300bb5cca690f9193 - Patch | |
| References | () https://github.com/discourse/discourse/security/advisories/GHSA-3qh8-xw23-cq4x - Third Party Advisory | |
| CPE | cpe:2.3:a:discourse:discourse:3.2.0:beta3:*:*:beta:*:*:* cpe:2.3:a:discourse:discourse:3.2.0:beta2:*:*:beta:*:*:* cpe:2.3:a:discourse:discourse:*:*:*:*:beta:*:*:* cpe:2.3:a:discourse:discourse:3.2.0:beta1:*:*:beta:*:*:* cpe:2.3:a:discourse:discourse:3.3.0:beta1:*:*:beta:*:*:* cpe:2.3:a:discourse:discourse:3.2.0:beta4:*:*:beta:*:*:* cpe:2.3:a:discourse:discourse:*:*:*:*:stable:*:*:* |
|
| First Time |
Discourse discourse
Discourse |
21 Nov 2024, 08:59
| Type | Values Removed | Values Added |
|---|---|---|
| References | () https://github.com/discourse/discourse/commit/819361ba28f86a1347059af300bb5cca690f9193 - | |
| References | () https://github.com/discourse/discourse/security/advisories/GHSA-3qh8-xw23-cq4x - |
15 Mar 2024, 20:15
| Type | Values Removed | Values Added |
|---|---|---|
| New CVE |
Information
Published : 2024-03-15 20:15
Updated : 2025-04-09 15:36
NVD link : CVE-2024-24748
Mitre link : CVE-2024-24748
CVE.ORG link : CVE-2024-24748
JSON object : View
Products Affected
discourse
- discourse
CWE