Discourse

discourse

Vendor: Discourse • 263 CVEs

CVEs (263)

CVE VENDORS PRODUCTS UPDATED PUBLISHED CVSS
CVE-2019-15515 1Discourse 1Discourse Jun 17, 2026 Aug 26, 2019 N/A· v4 6.5 MEDIUM· v3 4.3 MEDIUM· v2 Discourse 2.3.2 sends the CSRF token in the query string.
CVE-2019-1020018 1Discourse 1Discourse Jun 17, 2026 Jul 29, 2019 N/A· v4 7.3 HIGH· v3 7.5 HIGH· v2 Discourse before 2.3.0 and 2.4.x before 2.4.0.beta3 lacks a confirmation screen when logging in via an email link.
CVE-2019-1020017 1Discourse 1Discourse Jun 17, 2026 Jul 29, 2019 N/A· v4 5.3 MEDIUM· v3 5.0 MEDIUM· v2 Discourse before 2.3.0 and 2.4.x before 2.4.0.beta3 lacks a confirmation screen when logging in via a user-api OTP.