How severe is CVE-2024-55948?

This vulnerability has a severity rating of HIGH with a CVSS score of 8.2 out of 10.

What type of vulnerability is CVE-2024-55948?

This is classified as CWE-346, which is a common weakness in software security.

CVE-2024-55948 - HIGH Severity | CVSS 8.2

Vulnerability Description

Discourse is an open source platform for community discussion. In affected versions an attacker can make craft an XHR request to poison the anonymous cache (for example, the cache may have a response with missing preloaded data). This issue only affects anonymous visitors of the site. This problem has been patched in the latest version of Discourse. Users are advised to upgrade. Users unable to upgrade should disable anonymous cache by setting the `DISCOURSE_DISABLE_ANON_CACHE` environment variable to a non-empty value.

Related Vulnerabilities

CVE-2025-23023

HIGH

CVSS:8.2(High)

Discourse is an open source platform for community discussion. In affected versions an attacker can carefully craft a request with the right request headers to poison the anonymous cache (for example,...

CWE-3462025

CVE-2018-4319

HIGH

CVSS:8.1(High)

A cross-origin issue existed with "iframe" elements. This was addressed with improved tracking of security origins. This issue affected versions prior to iOS 12, watchOS 5, Safari 12, iTunes 12.9 for ...

CWE-3462018

CVE-2019-20329

HIGH

CVSS:8.1(High)

OpenLambda 2019-09-10 allows DNS rebinding attacks against the OL server for the REST API on TCP port 5000.

CWE-3462019

CVE-2019-9498

HIGH

CVSS:8.1(High)

The implementations of EAP-PWD in hostapd EAP Server, when built against a crypto library missing explicit validation on imported elements, do not validate the scalar and element values in EAP-pwd-Com...

CWE-3462019

CVE-2019-9499

HIGH

CVSS:8.1(High)

The implementations of EAP-PWD in wpa_supplicant EAP Peer, when built against a crypto library missing explicit validation on imported elements, do not validate the scalar and element values in EAP-pw...

CWE-3462019

CVE-2020-8818

HIGH

CVSS:8.1(High)

An issue was discovered in the CardGate Payments plugin through 2.0.30 for Magento 2. Lack of origin authentication in the IPN callback processing function in Controller/Payment/Callback.php allows an...

CWE-3462020