Test ID:	1.3.6.1.4.1.25623.1.0.150994
Category:	Denial of Service
Title:	Discourse < 3.1.1 Multiple DoS Vulnerabilities
Summary:	Discourse is prone to multiple denial of service (DoS); vulnerabilities.
Description:	Summary: Discourse is prone to multiple denial of service (DoS) vulnerabilities. Vulnerability Insight: The following vulnerabilities exist: - CVE-2023-38706: DoS via drafts - CVE-2023-40588: DoS via 2FA and Security Key Names - CVE-2023-41042: DoS via remote theme assets - CVE-2023-41043: DoS via SvgSprite cache Affected Software/OS: Discourse prior to version 3.1.1. Solution: Update to version 3.1.1 or later. CVSS Score: 6.8 CVSS Vector: AV:N/AC:L/Au:S/C:N/I:N/A:C
Cross-Ref:	Common Vulnerability Exposure (CVE) ID: CVE-2023-38706 https://github.com/discourse/discourse/security/advisories/GHSA-7wpp-4pqg-gvp8 Common Vulnerability Exposure (CVE) ID: CVE-2023-40588 https://github.com/discourse/discourse/security/advisories/GHSA-2hg5-3xm3-9vvx Common Vulnerability Exposure (CVE) ID: CVE-2023-41042 https://github.com/discourse/discourse/security/advisories/GHSA-2fq5-x3mm-v254 Common Vulnerability Exposure (CVE) ID: CVE-2023-41043 https://github.com/discourse/discourse/security/advisories/GHSA-28hh-h5xw-xgvx
Copyright	Copyright (C) 2023 Greenbone AG

This is only one of 145615 vulnerability tests in our test suite. Find out more about running a complete security audit. To run a free test of this vulnerability against your system, register below.