PT-2024-30658
CVE-2024-43789
·
تاريخ النشر
2024-10-07
·
تاريخ التحديث
2025-09-25
الوصف من
CVSS 3.1
7.5
عاليةالمقاييسAV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H
Name of the Vulnerable Software and Affected Versions
Discourse versions prior to the latest version
Description
Discourse is an open source platform for community discussion. A user can create a post with many replies, and then attempt to fetch them all at once. This can potentially reduce the availability of a Discourse instance.
Recommendations
Upgrade to the latest version of Discourse.
As a temporary workaround, consider restricting the number of replies that can be fetched at once to minimize the risk of exploitation.
قابلية الاستغلال
استغلال
إصلاح
التأثيرات
الباحثون
المورّدون
المنتجات المتأثرة
وجدت خطأً في الوصف؟ لديك ما تضيفه؟ لا تتردد في مراسلتنا 👾