CVE-2024-38360

Name of the Vulnerable Software and Affected Versions Discourse versions prior to 3.2.3

Description Discourse is an open source platform for community discussion. In affected versions, by creating replacement words with an almost unlimited number of characters, a moderator can reduce the availability of a Discourse instance.

Recommendations For versions prior to 3.2.3, upgrade to stable version 3.2.3 or a current beta to address the issue. As a temporary workaround for users unable to upgrade, manually remove the long watched words either via SQL or Rails console.