Test ID:	1.3.6.1.4.1.25623.1.0.170891
Category:	General
Title:	Discourse < 3.3.2 Multiple Vulnerabilities
Summary:	Discourse is prone to multiple vulnerabilities.
Description:	Summary: Discourse is prone to multiple vulnerabilities. Vulnerability Insight: The following vulnerabilities exist: - CVE-2024-45051: Bypass of email address validation via encoded email addresses - CVE-2024-45297: Prevent topic list filtering by hidden tags for unauthorized users - CVE-2024-47772: XSS via chat excerpts when CSP disabled - CVE-2024-47773: Anonymous cache poisoning via XHR requests - CVE-2024-55948: Anonymous cache poisoning via XHR requests - CVE-2025-23023: Anonymous cache poisoning via request headers Affected Software/OS: Discourse prior to version 3.3.2. Solution: Update to version 3.3.2 or later. CVSS Score: 8.5 CVSS Vector: AV:N/AC:L/Au:N/C:C/I:P/A:N
Cross-Ref:	Common Vulnerability Exposure (CVE) ID: CVE-2024-45051 Common Vulnerability Exposure (CVE) ID: CVE-2024-45297 Common Vulnerability Exposure (CVE) ID: CVE-2024-47772 Common Vulnerability Exposure (CVE) ID: CVE-2024-47773 Common Vulnerability Exposure (CVE) ID: CVE-2024-55948 Common Vulnerability Exposure (CVE) ID: CVE-2025-23023
Copyright	Copyright (C) 2024 Greenbone AG

This is only one of 145615 vulnerability tests in our test suite. Find out more about running a complete security audit. To run a free test of this vulnerability against your system, register below.