Show filters
2 Total Results
Displaying 1-2 of 2
Sort by:
Attacker Value
Unknown

CVE-2020-24327

Disclosure Date: September 23, 2021 (last updated February 23, 2025)
Server Side Request Forgery (SSRF) vulnerability exists in Discourse 2.3.2 and 2.6 via the email function. When writing an email in an editor, you can upload pictures of remote websites.
Attack Vector: NetworkPrivileges: NoneUser Interaction: None
0
0
Attacker Value
Unknown

CVE-2019-15515

Disclosure Date: August 26, 2019 (last updated November 27, 2024)
Discourse 2.3.2 sends the CSRF token in the query string.
0
0