CVE-2025-32376
Published: Apr 30, 2025Modified: Jun 17, 2026
4.8
Vector
CVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:A/VC:N/VI:N/VA:L/SC:N/SI:N/SA:L/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:XShow more
CVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:A/VC:N/VI:N/VA:L/SC:N/SI:N/SA:L/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:XShow less
Source: security-advisories@github.com (Secondary)
4.3
Vector
CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:L/A:N
Exploitability: 2.8 / Impact: 1.4
Source: NVD
Description
Discourse is an open-source discussion platform. Prior to versions 3.4.3 on the stable branch and 3.5.0.beta3 on the beta branch, the users limit for a DM can be bypassed, thus giving the ability to potentially create a DM with every user from a site in it. This issue has been patched in stable version 3.4.3 and beta version 3.5.0.beta3.
Affected (232)
Configuration A232 vulnerable
| Vulnerable Software | Affected Versions |
|---|---|
| Before 3.4.3 | |
| Version 1.1.0 beta1 | |
| Version 1.1.0 beta2 | |
| Version 1.1.0 beta3 | |
| Version 1.1.0 beta4 | |
| Version 1.1.0 beta5 | |
| Version 1.1.0 beta6 | |
| Version 1.1.0 beta6b | |
| Version 1.1.0 beta7 | |
| Version 1.1.0 beta8 | |
| Version 1.2.0 beta1 | |
| Version 1.2.0 beta2 | |
| Version 1.2.0 beta3 | |
| Version 1.2.0 beta4 | |
| Version 1.2.0 beta5 | |
| Version 1.2.0 beta6 | |
| Version 1.2.0 beta7 | |
| Version 1.2.0 beta8 | |
| Version 1.2.0 beta9 | |
| Version 1.3.0 beta10 | |
| Version 1.3.0 beta11 | |
| Version 1.3.0 beta1 | |
| Version 1.3.0 beta2 | |
| Version 1.3.0 beta3 | |
| Version 1.3.0 beta4 | |
| Version 1.3.0 beta5 | |
| Version 1.3.0 beta6 | |
| Version 1.3.0 beta7 | |
| Version 1.3.0 beta8 | |
| Version 1.3.0 beta9 | |
| Version 1.4.0 beta10 | |
| Version 1.4.0 beta11 | |
| Version 1.4.0 beta12 | |
| Version 1.4.0 beta1 | |
| Version 1.4.0 beta2 | |
| Version 1.4.0 beta3 | |
| Version 1.4.0 beta4 | |
| Version 1.4.0 beta5 | |
| Version 1.4.0 beta6 | |
| Version 1.4.0 beta7 | |
| Version 1.4.0 beta8 | |
| Version 1.4.0 beta9 | |
| Version 1.5.0 beta10 | |
| Version 1.5.0 beta11 | |
| Version 1.5.0 beta12 | |
| Version 1.5.0 beta13 | |
| Version 1.5.0 beta13b | |
| Version 1.5.0 beta14 | |
| Version 1.5.0 beta1 | |
| Version 1.5.0 beta2 | |
| Version 1.5.0 beta3 | |
| Version 1.5.0 beta4 | |
| Version 1.5.0 beta5 | |
| Version 1.5.0 beta6 | |
| Version 1.5.0 beta7 | |
| Version 1.5.0 beta8 | |
| Version 1.5.0 beta9 | |
| Version 1.6.0 beta10 | |
| Version 1.6.0 beta11 | |
| Version 1.6.0 beta12 | |
| Version 1.6.0 beta1 | |
| Version 1.6.0 beta2 | |
| Version 1.6.0 beta3 | |
| Version 1.6.0 beta4 | |
| Version 1.6.0 beta5 | |
| Version 1.6.0 beta6 | |
| Version 1.6.0 beta7 | |
| Version 1.6.0 beta8 | |
| Version 1.6.0 beta9 | |
| Version 1.7.0 beta10 | |
| Version 1.7.0 beta11 | |
| Version 1.7.0 beta1 | |
| Version 1.7.0 beta2 | |
| Version 1.7.0 beta3 | |
| Version 1.7.0 beta4 | |
| Version 1.7.0 beta5 | |
| Version 1.7.0 beta6 | |
| Version 1.7.0 beta7 | |
| Version 1.7.0 beta8 | |
| Version 1.7.0 beta9 | |
| Version 1.8.0 beta10 | |
| Version 1.8.0 beta11 | |
| Version 1.8.0 beta12 | |
| Version 1.8.0 beta13 | |
| Version 1.8.0 beta1 | |
| Version 1.8.0 beta2 | |
| Version 1.8.0 beta3 | |
| Version 1.8.0 beta4 | |
| Version 1.8.0 beta5 | |
| Version 1.8.0 beta6 | |
| Version 1.8.0 beta7 | |
| Version 1.8.0 beta8 | |
| Version 1.8.0 beta9 | |
| Version 1.9.0 beta10 | |
| Version 1.9.0 beta11 | |
| Version 1.9.0 beta12 | |
| Version 1.9.0 beta13 | |
| Version 1.9.0 beta14 | |
| Version 1.9.0 beta15 | |
| Version 1.9.0 beta16 | |
| Version 1.9.0 beta17 | |
| Version 1.9.0 beta1 | |
| Version 1.9.0 beta2 | |
| Version 1.9.0 beta3 | |
| Version 1.9.0 beta4 | |
| Version 1.9.0 beta5 | |
| Version 1.9.0 beta6 | |
| Version 1.9.0 beta7 | |
| Version 1.9.0 beta8 | |
| Version 1.9.0 beta9 | |
| Version 2.0.0 beta10 | |
| Version 2.0.0 beta1 | |
| Version 2.0.0 beta2 | |
| Version 2.0.0 beta3 | |
| Version 2.0.0 beta4 | |
| Version 2.0.0 beta5 | |
| Version 2.0.0 beta6 | |
| Version 2.0.0 beta7 | |
| Version 2.0.0 beta8 | |
| Version 2.0.0 beta9 | |
| Version 2.1.0 beta1 | |
| Version 2.1.0 beta2 | |
| Version 2.1.0 beta3 | |
| Version 2.1.0 beta4 | |
| Version 2.1.0 beta5 | |
| Version 2.1.0 beta6 | |
| Version 2.2.0 beta10 | |
| Version 2.2.0 beta1 | |
| Version 2.2.0 beta2 | |
| Version 2.2.0 beta3 | |
| Version 2.2.0 beta4 | |
| Version 2.2.0 beta5 | |
| Version 2.2.0 beta6 | |
| Version 2.2.0 beta7 | |
| Version 2.2.0 beta8 | |
| Version 2.2.0 beta9 | |
| Version 2.3.0 beta10 | |
| Version 2.3.0 beta11 | |
| Version 2.3.0 beta1 | |
| Version 2.3.0 beta2 | |
| Version 2.3.0 beta3 | |
| Version 2.3.0 beta4 | |
| Version 2.3.0 beta5 | |
| Version 2.3.0 beta6 | |
| Version 2.3.0 beta7 | |
| Version 2.3.0 beta8 | |
| Version 2.3.0 beta9 | |
| Version 2.4.0 beta10 | |
| Version 2.4.0 beta11 | |
| Version 2.4.0 beta1 | |
| Version 2.4.0 beta2 | |
| Version 2.4.0 beta3 | |
| Version 2.4.0 beta4 | |
| Version 2.4.0 beta5 | |
| Version 2.4.0 beta6 | |
| Version 2.4.0 beta7 | |
| Version 2.4.0 beta8 | |
| Version 2.4.0 beta9 | |
| Version 2.5.0 beta1 | |
| Version 2.5.0 beta2 | |
| Version 2.5.0 beta3 | |
| Version 2.5.0 beta4 | |
| Version 2.5.0 beta5 | |
| Version 2.5.0 beta6 | |
| Version 2.5.0 beta7 | |
| Version 2.6.0 beta1 | |
| Version 2.6.0 beta2 | |
| Version 2.6.0 beta3 | |
| Version 2.6.0 beta4 | |
| Version 2.6.0 beta5 | |
| Version 2.6.0 beta6 | |
| Version 2.7.0 beta1 | |
| Version 2.7.0 beta2 | |
| Version 2.7.0 beta3 | |
| Version 2.7.0 beta4 | |
| Version 2.7.0 beta5 | |
| Version 2.7.0 beta6 | |
| Version 2.7.0 beta7 | |
| Version 2.7.0 beta8 | |
| Version 2.7.0 beta9 | |
| Version 2.8.0 beta10 | |
| Version 2.8.0 beta11 | |
| Version 2.8.0 beta1 | |
| Version 2.8.0 beta2 | |
| Version 2.8.0 beta3 | |
| Version 2.8.0 beta4 | |
| Version 2.8.0 beta5 | |
| Version 2.8.0 beta6 | |
| Version 2.8.0 beta7 | |
| Version 2.8.0 beta8 | |
| Version 2.8.0 beta9 | |
| Version 2.9.0 beta10 | |
| Version 2.9.0 beta11 | |
| Version 2.9.0 beta12 | |
| Version 2.9.0 beta13 | |
| Version 2.9.0 beta14 | |
| Version 2.9.0 beta1 | |
| Version 2.9.0 beta2 | |
| Version 2.9.0 beta3 | |
| Version 2.9.0 beta4 | |
| Version 2.9.0 beta5 | |
| Version 2.9.0 beta6 | |
| Version 2.9.0 beta7 | |
| Version 2.9.0 beta8 | |
| Version 2.9.0 beta9 | |
| Version 3.0.0 beta15 | |
| Version 3.0.0 beta16 | |
| Version 3.1.0 beta1 | |
| Version 3.1.0 beta2 | |
| Version 3.1.0 beta3 | |
| Version 3.1.0 beta4 | |
| Version 3.1.0 beta5 | |
| Version 3.1.0 beta6 | |
| Version 3.1.0 beta7 | |
| Version 3.1.0 beta8 | |
| Version 3.2.0 | |
| Version 3.2.0 beta1 | |
| Version 3.2.0 beta2 | |
| Version 3.2.0 beta3 | |
| Version 3.2.0 beta4 | |
| Version 3.3.0 beta1 | |
| Version 3.3.0 beta2 | |
| Version 3.3.0 beta3 | |
| Version 3.3.0 beta4 | |
| Version 3.3.0 beta5 | |
| Version 3.3.0 beta6 | |
| Version 3.4.0 beta1 | |
| Version 3.4.0 beta2 | |
| Version 3.4.0 beta3 | |
| Version 3.4.0 beta4 | |
| Version 3.5.0 beta1 | |
| Version 3.5.0 beta2 |
References (2)
Source: security-advisories@github.com
Patch
Source: security-advisories@github.com
Vendor Advisory
Timeline
No history available yet.