Test ID:	1.3.6.1.4.1.25623.1.0.152548
Category:	General
Title:	Discourse 3.3.x < 3.3.0.beta3 Multiple Vulnerabilities
Summary:	Discourse is prone to multiple vulnerabilities.
Description:	Summary: Discourse is prone to multiple vulnerabilities. Vulnerability Insight: The following vulnerabilities exist: - CVE-2024-35234: Stored-dom XSS via Facebook Oneboxes - CVE-2024-35227: DoS through Onebox - CVE-2024-36113: Missing authorization checks for suspending admins/moderators - CVE-2024-37165: XSS via Onebox system - CVE-2024-37299: DoS via Tag Group - CVE-2024-38360: DoS via Watched Words - CVE-2024-39320: Iframe injection though default site setting Affected Software/OS: Discourse versions 3.3.x through 3.3.0.beta2. Solution: Update to version 3.3.0.beta3 or later. CVSS Score: 7.8 CVSS Vector: AV:N/AC:L/Au:N/C:N/I:N/A:C
Cross-Ref:	Common Vulnerability Exposure (CVE) ID: CVE-2024-35234 Common Vulnerability Exposure (CVE) ID: CVE-2024-35227 Common Vulnerability Exposure (CVE) ID: CVE-2024-36113 Common Vulnerability Exposure (CVE) ID: CVE-2024-37165 Common Vulnerability Exposure (CVE) ID: CVE-2024-37299 Common Vulnerability Exposure (CVE) ID: CVE-2024-38360 Common Vulnerability Exposure (CVE) ID: CVE-2024-39320
Copyright	Copyright (C) 2024 Greenbone AG

This is only one of 145615 vulnerability tests in our test suite. Find out more about running a complete security audit. To run a free test of this vulnerability against your system, register below.