CVE-2024-53994

MEDIUM Year: 2024
CVSS v3 Score
4.3
Medium
Weakness Type
CWE-281
View all →

Vulnerability Description

Discourse is an open source platform for community discussion. In affected versions users who disable chat in preferences could still be reachable in some cases. This problem has been patched in the latest version of Discourse. Users are advised to upgrade. Users unable to upgrade should disable the chat plugin within site settings.

Related Vulnerabilities

CVE-2017-5033

MEDIUM
CVSS:4.3(Medium)

Blink in Google Chrome prior to 57.0.2987.98 for Mac, Windows, and Linux and 57.0.2987.108 for Android failed to correctly propagate CSP restrictions to local scheme pages, which allowed a remote atta...

CWE-2812017

CVE-2019-14956

MEDIUM
CVSS:4.3(Medium)

JetBrains YouTrack before 2019.2.53938 was using incorrect settings, allowing a user without necessary permissions to get other project names.

CWE-2812019

CVE-2020-13230

MEDIUM
CVSS:4.3(Medium)

In Cacti before 1.2.11, disabling a user account does not immediately invalidate any permissions granted to that account (e.g., permission to view logs).

CWE-2812020

CVE-2021-23963

MEDIUM
CVSS:4.3(Medium)

When sharing geolocation during an active WebRTC share, Firefox could have reset the webRTC sharing state in the user interface, leading to loss of control over the currently granted permission. This ...

CWE-2812021

CVE-2022-2787

MEDIUM
CVSS:4.3(Medium)

Schroot before 1.6.13 had too permissive rules on chroot or session names, allowing a denial of service on the schroot service for all users that may start a schroot session.

CWE-2812022

CVE-2022-41708

MEDIUM
CVSS:4.3(Medium)

Relatedcode's Messenger version 7bcd20b allows an authenticated external attacker to access existing chats in the workspaces of any user of the application. This is possible because the application do...

CWE-2812022